Static task
static1
Behavioral task
behavioral1
Sample
JC_d8731ede9ad5d68b11ca020a84f77e4661eb7c23d509394c375b06ee611f36e1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
JC_d8731ede9ad5d68b11ca020a84f77e4661eb7c23d509394c375b06ee611f36e1.exe
Resource
win10v2004-20230915-en
General
-
Target
JC_d8731ede9ad5d68b11ca020a84f77e4661eb7c23d509394c375b06ee611f36e1
-
Size
1.3MB
-
MD5
656f0b2d1630e3ec818981cdbbc1ed28
-
SHA1
b5c330220952e1201a63cb17a4e9c3ef78a0d0eb
-
SHA256
d8731ede9ad5d68b11ca020a84f77e4661eb7c23d509394c375b06ee611f36e1
-
SHA512
6fc9e6439de27ee42797df7f2b87322a28a61a27d1bf86ea12be7a9ec1980ad0ceda25fc9608a14d26a0cf68f2c543fd00f6e0160cca1733c479a163aae92dd6
-
SSDEEP
24576:zgQROeIz4nWZUyCtviQBheK6SZe6gCY/gmNuXrf6M0i9oVNOwh8WaIf71/hziwDg:QeJnJviQBh7Fbg1/gcuXryJV4k8WaC/e
Malware Config
Signatures
Files
-
JC_d8731ede9ad5d68b11ca020a84f77e4661eb7c23d509394c375b06ee611f36e1.exe windows:6 windows x64
33ef73f6d990aa772e2d8fccf86698f8
Code Sign
68:58:3b:ae:1e:4d:9b:57:bf:45:23:1b:8d:2a:d9:3eCertificate
IssuerCN=Microsoft WindowsNot Before08/10/2023, 09:13Not After31/12/2039, 23:59SubjectCN=Microsoft Windows5f:46:1c:ba:e1:0f:6f:20:8f:c9:2d:2e:39:3a:a9:6a:c7:71:bf:fd:2d:24:7a:16:ec:8b:44:d1:c5:95:f3:b0Signer
Actual PE Digest5f:46:1c:ba:e1:0f:6f:20:8f:c9:2d:2e:39:3a:a9:6a:c7:71:bf:fd:2d:24:7a:16:ec:8b:44:d1:c5:95:f3:b0Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegSetValueExA
shell32
SHGetFolderPathW
Sections
.text Size: 49KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dmn Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dmn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ