Static task
static1
Behavioral task
behavioral1
Sample
de99e6f0be1e9a5d12fa7d4fe82b34cfb6ba6b85cee18e4acec0d7f97593bcbf_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
de99e6f0be1e9a5d12fa7d4fe82b34cfb6ba6b85cee18e4acec0d7f97593bcbf_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
de99e6f0be1e9a5d12fa7d4fe82b34cfb6ba6b85cee18e4acec0d7f97593bcbf_JC.exe
-
Size
688KB
-
MD5
25aed590a892f322fd8fa66aaa013945
-
SHA1
882f30314505b26a8a32f09aed0d15d177b832a6
-
SHA256
de99e6f0be1e9a5d12fa7d4fe82b34cfb6ba6b85cee18e4acec0d7f97593bcbf
-
SHA512
6fdd7d531c98d4547e9d6e939c9e5129a3d1fc06b7fb646a143c7c43d9688374ff3158533407b9e5966c765bc73d14d907d1aaca424034f475e8fe07b0374d86
-
SSDEEP
12288:LAfDuHOXC2x+AYBhKbdDpLocbXcJmdNsGS/l3NJAU0G4ZFxoZjYrxV8lJsFTqwOI:Lg8I+fh4/KGNsGyJeJpoZYrIlJ6qDm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de99e6f0be1e9a5d12fa7d4fe82b34cfb6ba6b85cee18e4acec0d7f97593bcbf_JC.exe
Files
-
de99e6f0be1e9a5d12fa7d4fe82b34cfb6ba6b85cee18e4acec0d7f97593bcbf_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ