Static task
static1
Behavioral task
behavioral1
Sample
a90a91fd74d05c3adba7a42962d5e503_JC.exe
Resource
win7-20230831-en
General
-
Target
a90a91fd74d05c3adba7a42962d5e503_JC.exe
-
Size
337KB
-
MD5
a90a91fd74d05c3adba7a42962d5e503
-
SHA1
6ae0cd068d36665c8478a4739304aaf249533ed5
-
SHA256
c5b45b8b94de4e9aeff22636f64a4f9a0e44884e9b01585f85f1b2c2ecf69d6c
-
SHA512
8a50856508719bc17d5cec66740a43e812453ecc9454045067884d5a0938a730b077b8d44bf57925c382fd04ff3435d92ed333e326e270a7a16d6e532068febf
-
SSDEEP
3072:DzZ+g+U3kHa4soW5v+RGIGx6IBazz1BBz/yMrPZmxbeTpSVp0U4355Sf:DX+psoWJ+IvLI7BzDPZmxMcVp0Xp58
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a90a91fd74d05c3adba7a42962d5e503_JC.exe
Files
-
a90a91fd74d05c3adba7a42962d5e503_JC.exe.exe windows:5 windows x86
3b3ca5844bdb8b6b333c1e673e18f1c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
gethostbyaddr
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
IOKGDTTY Size: - Virtual size: 484KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 326KB - Virtual size: 328KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE