Static task
static1
Behavioral task
behavioral1
Sample
cd801fa697c51fe4cebee5e1395b93ef_JC.exe
Resource
win7-20230831-en
General
-
Target
cd801fa697c51fe4cebee5e1395b93ef_JC.exe
-
Size
273KB
-
MD5
cd801fa697c51fe4cebee5e1395b93ef
-
SHA1
233e99cd589227b61e659e26fc5d9b8b2cb1383f
-
SHA256
7624f237780e8374463a6c030d13267f0df594f7f25c81576b0f50e9affb919c
-
SHA512
4fa16057da539b97c9bbee0d53a307d23bb3a8a3f59d5a16a28a602c4779d5e595d8692c762fde1e1b7bb27b114b0a663cb83c290e1af7927a348ed45b7c2fdd
-
SSDEEP
6144:XwgM03hO1GJigknGDjvzYR05CFc/SnODks:ggM03s1gk6vzYR05Mc/QO1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd801fa697c51fe4cebee5e1395b93ef_JC.exe
Files
-
cd801fa697c51fe4cebee5e1395b93ef_JC.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 235KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE