Static task
static1
Behavioral task
behavioral1
Sample
cd117537eccdff587e6dad598010c6b0exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cd117537eccdff587e6dad598010c6b0exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
cd117537eccdff587e6dad598010c6b0exe_JC.exe
-
Size
736KB
-
MD5
cd117537eccdff587e6dad598010c6b0
-
SHA1
a3a9fa8d0b0fdb2d09566cca4fc98900da28bace
-
SHA256
7b55ec096de650c8d8263a7d517d311efbdd7cc20aa5ea07e26bb818e71b3a82
-
SHA512
f7caefaf8cfb9a2c899a38968c47d72b28275431a0abdd3fdc10df965c1116d1e9644f402b59f4fab387721e3136d23d715ca0c3b8684ccae7942c83204b68d4
-
SSDEEP
12288:w6QabJHyHaHo1HKaeZcQmLtQhJIb02XQhszJXalLsdzVnx5tt:VQcYpUa3CLI3nMAzt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd117537eccdff587e6dad598010c6b0exe_JC.exe
Files
-
cd117537eccdff587e6dad598010c6b0exe_JC.exe.exe windows:4 windows x86
065f775cdf233430c54631466137c8c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleA
PrintDlgA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
gdi32
GetStockObject
FloodFill
RectInRegion
OffsetViewportOrgEx
Ellipse
EqualRgn
StretchBlt
SelectPalette
GetCurrentPositionEx
CloseEnhMetaFile
AngleArc
ExtFloodFill
CreateBrushIndirect
GetTextFaceA
GetAspectRatioFilterEx
EndDoc
PtVisible
ExtEscape
DPtoLP
StretchDIBits
GetPixel
SetBrushOrgEx
CreateDiscardableBitmap
GetArcDirection
GetCurrentObject
SetMiterLimit
GetKerningPairsA
OffsetWindowOrgEx
CreateRectRgn
CreateEllipticRgnIndirect
GetNearestPaletteIndex
ScaleViewportExtEx
GetNearestColor
GetCharABCWidthsFloatA
GetFontData
ExcludeClipRect
RestoreDC
CreateHalftonePalette
CreatePolygonRgn
DeleteObject
GetBitmapBits
SetPixelV
SaveDC
GetStretchBltMode
AnimatePalette
SetPaletteEntries
CloseFigure
CreatePatternBrush
CreateFontA
IntersectClipRect
GetBitmapDimensionEx
GetCharWidthFloatA
ExtSelectClipRgn
GetTextAlign
Polyline
CreateHatchBrush
SetBitmapDimensionEx
SetPixel
GetMapMode
GetPolyFillMode
SetTextJustification
GetTextColor
SelectObject
PaintRgn
GetRgnBox
SetArcDirection
UpdateColors
FrameRgn
FillRgn
GetTextExtentPointA
StrokePath
GetBrushOrgEx
PlgBlt
ExtCreateRegion
CreateSolidBrush
CreateFontIndirectA
PlayEnhMetaFile
GetClipBox
CopyMetaFileA
GdiComment
CreateBitmap
CreatePolyPolygonRgn
GetTextExtentPoint32A
TextOutA
ResetDCA
StartDocA
GetObjectType
CreateBitmapIndirect
CreateRoundRectRgn
PolyBezierTo
CombineRgn
MaskBlt
GetTextMetricsA
CreateDCA
SetViewportExtEx
PolyPolygon
CreatePenIndirect
ScaleWindowExtEx
EndPath
SetBitmapBits
RoundRect
DeleteDC
GetDCOrgEx
WidenPath
GetViewportOrgEx
LineTo
EndPage
DrawEscape
SelectClipPath
GetObjectA
SetMapMode
CreateCompatibleDC
StartPage
GetBkMode
CreateICA
GetWindowExtEx
BeginPath
GetDeviceCaps
GetMiterLimit
InvertRgn
SetTextAlign
SetROP2
GetWindowOrgEx
GetColorAdjustment
CreatePalette
GetGlyphOutlineA
CreateEnhMetaFileA
SetTextCharacterExtra
PolylineTo
GetROP2
GetClipRgn
BitBlt
StrokeAndFillPath
GetCharWidthA
RealizePalette
GetBoundsRect
SetTextColor
EnumObjects
AbortPath
FillPath
SelectClipRgn
advapi32
RegCloseKey
RegQueryValueExA
RegEnumKeyExW
SetSecurityDescriptorDacl
RegEnumValueW
RegGetKeySecurity
RegQueryInfoKeyW
GetUserNameW
OpenProcessToken
RegEnumKeyW
RegSetValueExA
InitializeSecurityDescriptor
RegQueryValueW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
kernel32
GetPrivateProfileStringA
HeapFree
lstrlenW
SetEndOfFile
GetEnvironmentStringsW
SetThreadPriority
GlobalFindAtomA
GetLocaleInfoA
DeleteFileA
SetCurrentDirectoryA
TlsAlloc
GetProcessHeap
MulDiv
GetVersionExA
GetTempPathA
IsValidCodePage
GetLocalTime
LCMapStringA
FormatMessageA
DuplicateHandle
GlobalLock
GetFullPathNameA
FreeEnvironmentStringsA
MultiByteToWideChar
QueryPerformanceCounter
lstrcmpA
SetLastError
VirtualQuery
WriteFile
GetCurrentProcessId
HeapSize
FindResourceExA
GetVolumeInformationA
GetEnvironmentStrings
GlobalDeleteAtom
EnterCriticalSection
CreateDirectoryA
InterlockedExchange
GetVersion
GetOEMCP
HeapCreate
lstrlenA
IsBadWritePtr
GetModuleFileNameA
GetCurrentProcess
UnlockFile
lstrcpynA
GetLocaleInfoW
GetFileSize
CopyFileA
FatalAppExitA
FileTimeToSystemTime
IsDebuggerPresent
CreateProcessA
TlsFree
GlobalFlags
CompareFileTime
WaitForSingleObject
MoveFileA
GlobalSize
GlobalReAlloc
GetSystemDirectoryA
GetConsoleMode
GetEnvironmentVariableA
FreeLibrary
GetFileTime
VirtualFree
FindClose
GlobalFree
FreeEnvironmentStringsW
CloseHandle
GetExitCodeProcess
GetFileType
Sleep
GetProcAddress
UnhandledExceptionFilter
ReadFile
LockFile
InterlockedIncrement
HeapAlloc
SetUnhandledExceptionFilter
TerminateProcess
InitializeCriticalSection
SetConsoleCtrlHandler
SetFileTime
LocalFree
EnumSystemLocalesA
FreeResource
GetUserDefaultLCID
GetConsoleCP
HeapDestroy
GetStartupInfoA
GetConsoleOutputCP
GetDateFormatA
GetModuleHandleA
GetCPInfo
OutputDebugStringA
VirtualAlloc
SetEvent
VirtualProtect
lstrcmpiA
RaiseException
ResumeThread
GetTickCount
WideCharToMultiByte
SetEnvironmentVariableA
CreateMutexA
GetSystemTimeAsFileTime
LCMapStringW
GetDriveTypeA
TlsGetValue
LeaveCriticalSection
CompareStringW
SetFileAttributesA
GetStdHandle
InterlockedDecrement
ExitProcess
GetStringTypeA
FindNextFileA
HeapReAlloc
GetCurrentDirectoryA
CompareStringA
CreateFileA
GetTempFileNameA
SetErrorMode
GetStringTypeExA
FindResourceA
TlsSetValue
RtlUnwind
LoadLibraryA
GetLastError
LockResource
OpenMutexA
GetModuleFileNameW
GetTimeZoneInformation
SetStdHandle
WritePrivateProfileStringA
WriteConsoleA
GetSystemTime
GetTimeFormatA
GetCurrentThreadId
GetCommandLineA
GetACP
FlushFileBuffers
DeleteCriticalSection
CreateFileW
GetShortPathNameA
lstrcpyA
GlobalAlloc
GetStringTypeW
SetFilePointer
IsValidLocale
GetThreadLocale
GlobalHandle
SetHandleCount
GetCurrentThread
_llseek
user32
WinHelpA
GetScrollRange
SetRect
ScreenToClient
LoadBitmapA
GetParent
MapDialogRect
GetWindow
FillRect
SendMessageA
GetForegroundWindow
InvalidateRect
GetSystemMenu
CreateWindowExA
MapWindowPoints
GetCapture
GetScrollInfo
FindWindowA
DestroyIcon
DrawFrameControl
OffsetRect
IsWindow
InflateRect
CopyRect
DestroyCursor
CharNextA
EnumChildWindows
DestroyWindow
IsRectEmpty
WindowFromPoint
SetWindowsHookExA
HideCaret
DrawFocusRect
DrawIcon
DispatchMessageA
LoadIconA
RegisterClassA
PostMessageA
EnableMenuItem
IsWindowEnabled
RegisterWindowMessageA
GetNextDlgTabItem
GetDC
EndDialog
DefWindowProcA
UpdateWindow
BeginPaint
DrawEdge
GetMenuItemID
CreatePopupMenu
ShowWindow
SetMenuItemBitmaps
GetWindowTextA
SetFocus
SetWindowPos
GetWindowPlacement
DrawMenuBar
GetMessageA
RegisterClassExA
ClientToScreen
mouse_event
EndPaint
wsprintfA
GetDesktopWindow
OpenClipboard
GetSubMenu
GetFocus
ReleaseDC
MessageBoxA
GetCursorPos
DrawTextA
EmptyClipboard
PtInRect
PostThreadMessageA
CallNextHookEx
GetClassNameA
RedrawWindow
GetClientRect
SetWindowTextA
FrameRect
PostQuitMessage
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 452KB - Virtual size: 449KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ