Static task
static1
Behavioral task
behavioral1
Sample
a3721a9a2d11e50633fdf0f7e12f8240exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a3721a9a2d11e50633fdf0f7e12f8240exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
a3721a9a2d11e50633fdf0f7e12f8240exe_JC.exe
-
Size
66KB
-
MD5
a3721a9a2d11e50633fdf0f7e12f8240
-
SHA1
24a3a9ee0320ef80daeb4f5c2cae9ddd449365b3
-
SHA256
91dde85fcaa9083cc48a77b5b9d880688e25023134a86c3b7ac44091e6189ddf
-
SHA512
13ec9be1506db3cbaa9a2454752d05f9180d97e5def16d0021d77bb0c209f0643a779d462d4edfaf89625464476e63309f7c2de77a03b8f5f1240c29f6e6ee5c
-
SSDEEP
1536:nE8knd+fZNBy7Yy1uFIsyQRSa7PJcpn7XbGdVPgwbok5hiF2:xAbeIUD9u7rGBL5hI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3721a9a2d11e50633fdf0f7e12f8240exe_JC.exe
Files
-
a3721a9a2d11e50633fdf0f7e12f8240exe_JC.exe.exe windows:4 windows x86
88847f08a58aa003b994d6ca6a54c627
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreW
CancelTimerQueueTimer
GetCommTimeouts
TerminateProcess
CreateNamedPipeA
LZDone
GlobalDeleteAtom
FindVolumeClose
PrivCopyFileExW
ReadConsoleInputW
GetShortPathNameW
CreateFileMappingA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE