Static task
static1
Behavioral task
behavioral1
Sample
51866f228a4efbdf3bf1caa53ec47a70_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
51866f228a4efbdf3bf1caa53ec47a70_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
51866f228a4efbdf3bf1caa53ec47a70_JC.exe
-
Size
484KB
-
MD5
51866f228a4efbdf3bf1caa53ec47a70
-
SHA1
c0306ad9ce9753710b4eb8ffb07f22b2301fcbf6
-
SHA256
94d5414a9ed8a2e22b4d90823cde4424c64d12b7d1f17c940f50217037a96f9e
-
SHA512
a3d383869c1a88a94deb015a81cb1a7dff9117715dbafbdabcaebd576b12ac8702631fae681b64e61103b8db53277b68d88ff3c0fabbf0ce17ddf0177dd42e43
-
SSDEEP
12288:itXMzqrllX7WwnWs52hzpHq8eTi30yIQr+:iVMilX7WwnD2hQ8eTi3Ig+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51866f228a4efbdf3bf1caa53ec47a70_JC.exe
Files
-
51866f228a4efbdf3bf1caa53ec47a70_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE