Static task
static1
Behavioral task
behavioral1
Sample
96da7ff9897283f53b08caa860161a58_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
96da7ff9897283f53b08caa860161a58_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
96da7ff9897283f53b08caa860161a58_JC.exe
-
Size
624KB
-
MD5
96da7ff9897283f53b08caa860161a58
-
SHA1
aad833b99f4230f0757deec61073dfa33afa7491
-
SHA256
6f395d45f548f5c60466575206a2a3f4306fad9ec6379ca033d12f9027a3e31e
-
SHA512
fe0ca3d8b08c2f30124938352f3314459d1eaaf8c9c0d33d0c8d4906a9c9f27f7f41d13ba78fbbd52cf50c364d9819c7e98caf314c258ecf56a81b9f724fb924
-
SSDEEP
12288:Q8hoHG7vtu5Jo7lADroAo5osBGVPr4ok82BjvrEH7k:dhoHGaR9QosBGVP8ok8grEH7k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96da7ff9897283f53b08caa860161a58_JC.exe
Files
-
96da7ff9897283f53b08caa860161a58_JC.exe.exe windows:4 windows x86
28a182180848b991e3bd70f92058734d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comdlg32
GetOpenFileNameA
GetSaveFileNameA
gdi32
ChoosePixelFormat
CreatePalette
DeleteObject
GetDeviceCaps
RealizePalette
SelectPalette
SetDIBitsToDevice
SetPaletteEntries
SetPixelFormat
SwapBuffers
kernel32
AddAtomA
Beep
CloseHandle
CreateConsoleScreenBuffer
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
FindAtomA
FreeLibrary
GetAtomNameA
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetLargestConsoleWindowSize
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
GetStdHandle
GetTickCount
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LockFile
MultiByteToWideChar
PeekConsoleInputA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReleaseSemaphore
ResetEvent
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SetConsoleActiveScreenBuffer
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleWindowInfo
SetEvent
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
UnlockFile
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleInputA
WriteConsoleOutputA
WriteConsoleOutputW
WriteFile
msvcrt
_strdup
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthread
_cexit
_chdir
_controlfp
_errno
_execl
_filelengthi64
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_gcvt
_get_osfhandle
_iob
_isctype
_itoa
_onexit
_pclose
_pctype
_popen
_putenv
_setmode
_snprintf
_spawnl
_stricmp
_strnicmp
_ultoa
abort
atexit
atoi
calloc
ceil
cos
exit
fclose
fflush
fgetpos
fgets
floor
fopen
fprintf
fread
free
freopen
fsetpos
ftell
fwrite
getenv
localtime
log10
malloc
mbstowcs
memcpy
memmove
memset
modf
pow
raise
rand
realloc
remove
rename
setvbuf
signal
sin
sprintf
sqrt
srand
strcat
strchr
strcpy
strlen
strncat
strncpy
strrchr
strstr
strtod
time
tolower
toupper
wcslen
wcstol
user32
AdjustWindowRect
BeginPaint
CallWindowProcA
ChangeDisplaySettingsA
ClientToScreen
ClipCursor
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EndPaint
EnumDisplaySettingsA
FindWindowA
GetAsyncKeyState
GetCapture
GetClientRect
GetCursorPos
GetDC
GetForegroundWindow
GetKeyboardState
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
KillTimer
LoadCursorA
LoadIconA
MapVirtualKeyA
MapWindowPoints
PeekMessageA
PostMessageA
PtInRect
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SetCapture
SetCursor
SetCursorPos
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
ToAscii
TranslateMessage
UnregisterClassA
VkKeyScanA
WindowFromPoint
winmm
mciSendStringA
Sections
.text Size: 421KB - Virtual size: 421KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE