Static task
static1
Behavioral task
behavioral1
Sample
0e13bee677ad08c1094c62a7498397dc_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0e13bee677ad08c1094c62a7498397dc_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
0e13bee677ad08c1094c62a7498397dc_JC.exe
-
Size
237KB
-
MD5
0e13bee677ad08c1094c62a7498397dc
-
SHA1
0b6fd4387830e124088f5227b4b73daf5c8360e8
-
SHA256
d68199b75164e06be11917c3a58116aa126ba6b1518286495f4271c8e02aab49
-
SHA512
04a9e0c40b71d64de5c08f5f3530b8eca43fe4ffd878a34b008ff52f12596a467655de53b6e911d21ba674f88fe7721bf2d756c4b49e2b25229e088c4304944f
-
SSDEEP
6144:qJuXtXxog5E+FWPNfrf6yGEssQxNpbMGw:G8XNE+FuNfrSyGEssQJw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e13bee677ad08c1094c62a7498397dc_JC.exe
Files
-
0e13bee677ad08c1094c62a7498397dc_JC.exe.exe windows:4 windows x86
3e3d633779e35448851e7a9ca7e72522
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
Sections
.MPRESS1 Size: 170KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE