Static task
static1
Behavioral task
behavioral1
Sample
2a440738dd4ec848f2f890f8e724e05a_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2a440738dd4ec848f2f890f8e724e05a_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2a440738dd4ec848f2f890f8e724e05a_JC.exe
-
Size
195KB
-
MD5
2a440738dd4ec848f2f890f8e724e05a
-
SHA1
32db1550509c0338bd767bbd7a5c5d8ce66d0178
-
SHA256
2afb875e9b36c373c34e4acf50196600b0fdbeb87c2668ad1726a053aaa0d209
-
SHA512
453caa1304bc7f88b921c6b8e7e7a72a7c2861e29c8719733cfe8aef13c93f6cbc27d80b89c43e9f91a758ff270505902ac9a6377cf48a9e4259856ca47535de
-
SSDEEP
3072:OR4jdNqTqHLklZpb4RrRDFBI/cMrnTS4y3NkEjbvjuC8xVkxRQjZ3phRrbK9gmQO:IafcEHI/prnm4y3NjTjuC8xOcxphbmQO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a440738dd4ec848f2f890f8e724e05a_JC.exe
Files
-
2a440738dd4ec848f2f890f8e724e05a_JC.exe.exe windows:4 windows x86
3e3d633779e35448851e7a9ca7e72522
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
Sections
.MPRESS1 Size: 163KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ