Static task
static1
Behavioral task
behavioral1
Sample
3bf5525f7e9536da0a0cf982fad11dc70c315868de1f3fe90c3bd38c0595bf20.exe
Resource
win7-20230831-en
General
-
Target
e35cab492708456c94ad9ee0beb35544_JC.bin
-
Size
6.7MB
-
MD5
1d413a4311297c938d393d995f88d2e5
-
SHA1
4ebd30095ed097341c8def48330c1843151133d1
-
SHA256
3dd445f8841960217c0f145a82835f890580678ad93083266035a140451ed9fd
-
SHA512
a82fc32537200f35c03d342e673e64b7bc9cc8252249654ddbe43467676205f3f0ed00dcce11098f5dbe3ce09b5a750ef724020664a0b3f07ca2d5a2e3131868
-
SSDEEP
196608:LGNOJZy7BMbw21uZNsFbnRFH45HQybPDkq1kpzEu:LmOJZqBm513FbnbuHQybPDm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3bf5525f7e9536da0a0cf982fad11dc70c315868de1f3fe90c3bd38c0595bf20.exe
Files
-
e35cab492708456c94ad9ee0beb35544_JC.bin.zip
Password: infected
-
3bf5525f7e9536da0a0cf982fad11dc70c315868de1f3fe90c3bd38c0595bf20.exe.exe windows:6 windows x64
46afc61b34fb8e20ac7399f0df86ba31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CoCreateInstance
Sections
.text Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text0 Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text2 Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ