Static task
static1
Behavioral task
behavioral1
Sample
948ef002e5168d8f12d9884068e7e465b12eb64ea61ceba589290fb52ce9f6a6_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
948ef002e5168d8f12d9884068e7e465b12eb64ea61ceba589290fb52ce9f6a6_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
948ef002e5168d8f12d9884068e7e465b12eb64ea61ceba589290fb52ce9f6a6_JC.exe
-
Size
355KB
-
MD5
9f1c289ae03a8b44fb7bd647fb6d0eae
-
SHA1
539406ad2e1b72bac405e9f0490c46999d16f01f
-
SHA256
948ef002e5168d8f12d9884068e7e465b12eb64ea61ceba589290fb52ce9f6a6
-
SHA512
1df24d1d485bfc68fd939fd879012f8ac7cd6a5ae23a563176addfd6122eff52e6e40f6f8ab06799b1ae3bedf1c8edab414eba4c33a5b380ae2a113e63eefc09
-
SSDEEP
6144:W5JlbtvQoL11x52jAqCyJae6FM6rsq5heG5utLR56LGDy2gMbgtN2O0E:W3ptvXxAjAGOM6rP20uKQi+0N2I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 948ef002e5168d8f12d9884068e7e465b12eb64ea61ceba589290fb52ce9f6a6_JC.exe
Files
-
948ef002e5168d8f12d9884068e7e465b12eb64ea61ceba589290fb52ce9f6a6_JC.exe.exe windows:5 windows x86
8a5878408e89d1fd5731f7a33cc8a29b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameW
EnumResourceNamesW
SetFilePointer
PeekNamedPipe
SetConsoleTextAttribute
OpenJobObjectA
GlobalLock
WriteConsoleInputA
CreateHardLinkA
FreeEnvironmentStringsA
GetTickCount
GetDateFormatA
LoadLibraryW
SizeofResource
GetFileAttributesA
FileTimeToSystemTime
GetGeoInfoA
CreateFileW
SetThreadPriority
GetLogicalDriveStringsA
GetLastError
GetThreadContext
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
BackupWrite
InterlockedExchangeAdd
CreateHardLinkW
FoldStringW
GetModuleFileNameA
FindNextFileA
FindFirstChangeNotificationA
GetShortPathNameW
OpenSemaphoreW
FindFirstVolumeW
GetConsoleProcessList
FindNextVolumeA
HeapSize
ReadConsoleOutputCharacterA
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
RtlUnwind
MultiByteToWideChar
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
SetStdHandle
GetModuleHandleA
GetConsoleCP
GetConsoleMode
LoadLibraryA
RaiseException
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
GetClassInfoExA
GetMessageExtraInfo
LoadMenuA
CharToOemBuffA
advapi32
InitiateSystemShutdownA
Sections
.text Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ