Static task
static1
Behavioral task
behavioral1
Sample
d2305ee199d7532f05e9e64034178624_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d2305ee199d7532f05e9e64034178624_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
d2305ee199d7532f05e9e64034178624_JC.exe
-
Size
235KB
-
MD5
d2305ee199d7532f05e9e64034178624
-
SHA1
216c5b6c3cf6ed7c0b5d49d34e3df39308cb124d
-
SHA256
aec98b31de41d4ce48726b66a037a7eef2e86614e75819a8c43b914d45f93ce0
-
SHA512
0b3d24bf9aeca7ebfaab97da24cf7409cd5a188e9b7a88904ef2fe794675a6896576dbdaafa575b9ab3cc331c0a1d97c02c1250f500c6c9dd8b8d3d474f3cf23
-
SSDEEP
3072:WSx07luj5x8y68TnHOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5AuJaW4q:GRuNx8t2nulrtMsQB+vn87L5A5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2305ee199d7532f05e9e64034178624_JC.exe
Files
-
d2305ee199d7532f05e9e64034178624_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ