Static task
static1
Behavioral task
behavioral1
Sample
cfd4f7fb83fbb0d27a61706e4737cdf0exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cfd4f7fb83fbb0d27a61706e4737cdf0exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
cfd4f7fb83fbb0d27a61706e4737cdf0exe_JC.exe
-
Size
708KB
-
MD5
cfd4f7fb83fbb0d27a61706e4737cdf0
-
SHA1
1cce1b94c1828f52cb0f6d316004b69c67010a10
-
SHA256
3bc0c09a68e795e0245c6fb5a974a195660a6b3810ab20ba1fb74756e96a1065
-
SHA512
3122d5d449e1b65a327cad9bb17c531ac2487a4bcd945db00228a1321860368611813b1390b442425642ddd8eaba61582cf5baebdc51c186d1e56e6f31b2a6ab
-
SSDEEP
12288:57VopBihBg85SoFn63XO4BARG5Gb7IP7rTEEwVPTkLcpK2cIgyA+hKOvn0ws6p7B:YpBege6zBARG5GXIPJwgQeEVZtHp7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfd4f7fb83fbb0d27a61706e4737cdf0exe_JC.exe
Files
-
cfd4f7fb83fbb0d27a61706e4737cdf0exe_JC.exe.exe windows:4 windows x86
224889820030fc51415b176f246176a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Create
ImageList_GetImageCount
mfc42
ord1576
shell32
ShellExecuteA
ord155
Shell_NotifyIconW
DragFinish
user32
EnableWindow
SetWindowPos
CheckRadioButton
RemoveMenu
GetParent
SetCursor
SetWindowTextA
RemovePropA
DefWindowProcA
DispatchMessageA
PeekMessageA
GetCapture
ShowWindow
EndDeferWindowPos
GetWindowTextLengthA
PtInRect
GetScrollRange
GetDC
DestroyWindow
GetSysColor
TranslateAcceleratorA
SendDlgItemMessageA
EndPaint
ReuseDDElParam
GetMenuItemInfoA
CharNextA
LoadAcceleratorsA
LoadIconA
MessageBoxA
BeginDeferWindowPos
GetWindowTextA
PostThreadMessageA
GetClientRect
BeginPaint
IsWindow
LoadCursorA
SetRectEmpty
SetWindowLongA
RegisterClassA
CreateWindowExA
RegisterClassExA
GetDlgItemTextA
CreateDialogIndirectParamA
RegisterClipboardFormatA
GetClassLongA
GetSysColorBrush
GetWindowLongA
RegisterWindowMessageA
oleaut32
LoadTypeLi
advapi32
CryptAcquireContextA
RegQueryValueExW
RegCloseKey
CryptReleaseContext
GetUserNameW
RegQueryValueExA
RegCreateKeyExW
RegCreateKeyExA
RegSetValueExW
RegOpenKeyExW
InitializeSecurityDescriptor
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
kernel32
GetStringTypeA
HeapAlloc
GetEnvironmentStrings
GetModuleHandleA
SetUnhandledExceptionFilter
VirtualQuery
IsBadWritePtr
RaiseException
IsValidCodePage
GetVersionExA
GetStartupInfoA
QueryPerformanceCounter
SetHandleCount
MultiByteToWideChar
GetLocaleInfoA
DeleteCriticalSection
LCMapStringW
GetStringTypeW
SetEnvironmentVariableA
SetStdHandle
GetACP
GetLastError
CreateMutexA
GetUserDefaultLCID
GetTimeFormatA
HeapDestroy
GetProcAddress
SetFilePointer
FatalAppExitA
GetDateFormatA
GetTimeZoneInformation
GetCurrentThread
GetEnvironmentStringsW
GetLocaleInfoW
IsBadReadPtr
CompareStringW
GetFileType
CompareStringA
TlsFree
InitializeCriticalSection
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
TlsAlloc
GetOEMCP
GetSystemTimeAsFileTime
LeaveCriticalSection
VirtualAlloc
HeapSize
SetLastError
IsValidLocale
TerminateProcess
IsBadCodePtr
GetCurrentProcess
FlushFileBuffers
GetTickCount
InterlockedExchange
TlsSetValue
EnterCriticalSection
FreeEnvironmentStringsW
GetCurrentThreadId
HeapReAlloc
GetCurrentProcessId
LoadLibraryA
ExitProcess
EnumSystemLocalesA
WriteFile
TlsGetValue
GetSystemInfo
UnhandledExceptionFilter
HeapFree
ReadFile
VirtualProtect
RtlUnwind
SetConsoleCtrlHandler
HeapCreate
LCMapStringA
GetModuleFileNameA
GetStdHandle
WideCharToMultiByte
CloseHandle
VirtualFree
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 456KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ