Static task
static1
Behavioral task
behavioral1
Sample
8431d632b1a6c295b8747bb4bf54c74a4882f16800c264c8c71dce0d0f4e1d30_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8431d632b1a6c295b8747bb4bf54c74a4882f16800c264c8c71dce0d0f4e1d30_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
8431d632b1a6c295b8747bb4bf54c74a4882f16800c264c8c71dce0d0f4e1d30_JC.exe
-
Size
1.9MB
-
MD5
38638fca807b576662456043e90da26e
-
SHA1
d2c77bf272b886fc3b12e9be07dee02a5707196e
-
SHA256
8431d632b1a6c295b8747bb4bf54c74a4882f16800c264c8c71dce0d0f4e1d30
-
SHA512
b704e9de6a49c46c40ad1b0a1d1d4fc9e3618a6a552a4501ee8e3493c3ed42cefd975878bf34fbcf9ad91f05614af984c3e897e7e8f26a2a0d01bf8aa1f10853
-
SSDEEP
24576:8IVFLp7J6yx3fxD16lORcOQ+/9Z5C38D3Tvrn47rme5rEKXHi8aqw:8cfx75R/9Z5C38DzjkmArE18a7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8431d632b1a6c295b8747bb4bf54c74a4882f16800c264c8c71dce0d0f4e1d30_JC.exe
Files
-
8431d632b1a6c295b8747bb4bf54c74a4882f16800c264c8c71dce0d0f4e1d30_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ