Static task
static1
Behavioral task
behavioral1
Sample
e1a06b48856323fb3b86589bb07d7ef5_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e1a06b48856323fb3b86589bb07d7ef5_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
e1a06b48856323fb3b86589bb07d7ef5_JC.exe
-
Size
124KB
-
MD5
e1a06b48856323fb3b86589bb07d7ef5
-
SHA1
b76e519cc643b5f7cd1a66f8621f02a5d610da85
-
SHA256
246ffc53e3e706d1a5a02345b0835c34fa781ba9f86f7f52bfc578441ecc17ec
-
SHA512
047359fd5119d34e87ef5e3728997b52fa846c14d3d5e403547c6103c3a4f85b3b5c5f98c66866ee4cbae72fe36553f1a1d51906fea8199a1a344f2e04922319
-
SSDEEP
3072:Zq8f/oic1i9uTAlPQSDwEyWefHEvGdxETCpPJZ:08f/U1iF/sUGdxETI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1a06b48856323fb3b86589bb07d7ef5_JC.exe
Files
-
e1a06b48856323fb3b86589bb07d7ef5_JC.exe.exe windows:5 windows x86
7bef13f58538df84f5270fe7542e9811
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
SetTimer
shell32
ShellExecuteExW
ole32
CoInitializeEx
psapi
GetModuleBaseNameW
shlwapi
StrStrNIW
ntdll
memset
advapi32
RegFlushKey
Sections
.MPRESS1 Size: 119KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE