Static task
static1
Behavioral task
behavioral1
Sample
941bfd5925afc38fb7e9d60a9d69049f_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
941bfd5925afc38fb7e9d60a9d69049f_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
941bfd5925afc38fb7e9d60a9d69049f_JC.exe
-
Size
486KB
-
MD5
941bfd5925afc38fb7e9d60a9d69049f
-
SHA1
7ab00c01df627165d1e4a1e6ed60af30e10a35c6
-
SHA256
fdd3a7ff96d7ea3df472930207dab0e24afd747370d6c755d84b0843026c0abb
-
SHA512
d24e902bb4e1ac2ee331590be723ba03d6fff2066334ed2e7b138169068b7ca43b2bdd5469b28c5618339c0bf144f7c0e563bff62aaf7e9a274cab4e89874f29
-
SSDEEP
6144:u+KgIfHUzQM2upJ/LSBvx8oaXGO1A18X6T+/SlNe3JA6Ap04a4+9zDC99kwCj3tL:FIBY2Bv6fAuM+/SB+9HM9kH302
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 941bfd5925afc38fb7e9d60a9d69049f_JC.exe
Files
-
941bfd5925afc38fb7e9d60a9d69049f_JC.exe.exe windows:4 windows x86
f7d7aebc53da63d60a50b5993b57877a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
wsock32
send
Sections
. Size: 28KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ