Static task
static1
Behavioral task
behavioral1
Sample
b5773060cacf7eb7b5f85205b7a19ad3_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b5773060cacf7eb7b5f85205b7a19ad3_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
b5773060cacf7eb7b5f85205b7a19ad3_JC.exe
-
Size
27KB
-
MD5
b5773060cacf7eb7b5f85205b7a19ad3
-
SHA1
3dbf8dee0e202a687a312f9318889daf70b6a718
-
SHA256
41d99f6af1c42e7fa866a50ca7f327ba800371d9db80f29728558fe79dc14dea
-
SHA512
349bb2da03d5aa2cbe37385d8ab83acd3d0569f4a95b01ae23862d85604a1b09e5e801eb00b387f2796f3661b03f5c99bd59bc45b4efa20f02aeb4c759f67e5e
-
SSDEEP
768:rSA2J9gx336PmZ2uMNIRRRRRRjRRRRRR1Ab4:rqKAuwb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5773060cacf7eb7b5f85205b7a19ad3_JC.exe
Files
-
b5773060cacf7eb7b5f85205b7a19ad3_JC.exe.exe windows:4 windows x86
243a968efa8b2c790c1c6acaf21f4f88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntW
GetShortPathNameA
FindFirstFileA
DeviceIoControl
InterlockedDecrement
GetPrivateProfileIntW
OpenMutexA
GetModuleHandleW
GetEnvironmentVariableA
SetErrorMode
GetPrivateProfileIntW
WriteConsoleA
GetTickCount
GetSystemTime
GetLastError
FileTimeToSystemTime
lstrcpynW
ReplaceFileA
CreateEventW
GetProfileIntW
GetProcAddress
GetPrivateProfileIntW
SleepEx
user32
GetCaretPos
SetFocus
EnumDesktopsA
DrawIcon
CharToOemA
CreateDesktopA
GetClassInfoA
MessageBoxA
PostMessageW
GetMessageW
SetCursorPos
PeekMessageA
LoadCursorA
DialogBoxParamW
LoadImageA
IsDialogMessageA
dbnmpntw
ConnectionClose
ConnectionVer
ConnectionError
ConnectionRead
cryptdll
CDLocateRng
MD5Init
MD5Final
MD5Update
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ