Static task
static1
Behavioral task
behavioral1
Sample
2068994f4e691f7c68279c3b449c3237_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2068994f4e691f7c68279c3b449c3237_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2068994f4e691f7c68279c3b449c3237_JC.exe
-
Size
414KB
-
MD5
2068994f4e691f7c68279c3b449c3237
-
SHA1
95f240eeabd74e5c7a020008e4a6178f236b0e06
-
SHA256
a60ef8449bd11154599028ee608e002126a3b542a89c5854e7991827caf4d149
-
SHA512
37a2e55b97a981b1b9c74dbe22b42864e82d24fce4cb9fb690e7f94b9721abea64beda612bf7f90c7f787977c58b0d3387a7aa25b8d125f9c7d5dfeb2bf1a3f3
-
SSDEEP
12288:p1blAn+TCYps/JTXTd9OFi4RXnIwRmq6qsAM:p1blbgFd9TknfRT6qsJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2068994f4e691f7c68279c3b449c3237_JC.exe
Files
-
2068994f4e691f7c68279c3b449c3237_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ