Static task
static1
Behavioral task
behavioral1
Sample
4e4517520783f352391a9dd20ce5fbde_JC.exe
Resource
win7-20230831-en
General
-
Target
4e4517520783f352391a9dd20ce5fbde_JC.exe
-
Size
272KB
-
MD5
4e4517520783f352391a9dd20ce5fbde
-
SHA1
cf086a5eb28cacddae31fb2f58e3f18f7bdb8745
-
SHA256
3e035c5bca2ef69e1d4f730c551e773c273ec6463a0abc30191a4d6611184f89
-
SHA512
aadaaa61e9a262a29d4d4faa1d3b2e7d200f30a409ed7a655955078522dee24e6753acb96d5224eff660ef93b3abc6a016f449878db87268d0c163085fc27885
-
SSDEEP
6144:XwgM03hO1GJigknGDjvzYR05CFc/SnODkz:ggM03s1gk6vzYR05Mc/QOk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e4517520783f352391a9dd20ce5fbde_JC.exe
Files
-
4e4517520783f352391a9dd20ce5fbde_JC.exe.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 235KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE