Static task
static1
Behavioral task
behavioral1
Sample
daf8c4dc031c12495b2c7ec95470db23_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
daf8c4dc031c12495b2c7ec95470db23_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
daf8c4dc031c12495b2c7ec95470db23_JC.exe
-
Size
4.8MB
-
MD5
daf8c4dc031c12495b2c7ec95470db23
-
SHA1
30e5ac0fe4bad10ae99204e8e98b15408ed15c64
-
SHA256
8fe0e73c5d2cff83436bf63400d04baa197e4bfc95c29e9bd2abb0f83f7c9aeb
-
SHA512
fd32f16236458c94dbf2a2f9fd0ee6c9db6282a12d8fa492cb8a945dc2652bcf4cdd4979fb68632b4270dffe03bb4794c830a92ff050771f74590bfb5fa3cc21
-
SSDEEP
98304:ZTrTIsEzqv4TuH7AhpVDWP88uues6vbw1hB6vOJ:Z/XEm4aH71U8j16TyP6s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daf8c4dc031c12495b2c7ec95470db23_JC.exe
Files
-
daf8c4dc031c12495b2c7ec95470db23_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lol0 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ