Static task
static1
Behavioral task
behavioral1
Sample
aa5dd4972e0211d912506d36b72be348566efb407712dd97aab3c8f69bba0294_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
aa5dd4972e0211d912506d36b72be348566efb407712dd97aab3c8f69bba0294_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
aa5dd4972e0211d912506d36b72be348566efb407712dd97aab3c8f69bba0294_JC.exe
-
Size
743KB
-
MD5
ce189a54952edefdb51b67987620c0e3
-
SHA1
f055ae7bfb460df2941ac0fdf23c0ea9bbcf7191
-
SHA256
aa5dd4972e0211d912506d36b72be348566efb407712dd97aab3c8f69bba0294
-
SHA512
5e5478dfdfd72d1fda198a80e8f6f5dfde06c631eed57b3ceda9bb8d485bb2421fc9857d94013aed57f435d480c7eadf39e8535091193f5ba57e207473be3f23
-
SSDEEP
12288:6wLJRMAtqxx/MKTeXGq95qZeWL0z/xf5pFnzoekxkmWq6c:6wLj+1pq95qJoxfbN0Kq6c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa5dd4972e0211d912506d36b72be348566efb407712dd97aab3c8f69bba0294_JC.exe
Files
-
aa5dd4972e0211d912506d36b72be348566efb407712dd97aab3c8f69bba0294_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 645KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ