Static task
static1
Behavioral task
behavioral1
Sample
b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2_JC.exe
Resource
win7-20230831-en
General
-
Target
b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2_JC.exe
-
Size
334KB
-
MD5
670add147fa800c55dae647a90f9e4c1
-
SHA1
a1fb811f5766f7b5440bcf835e34e4cd7ac66d94
-
SHA256
b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2
-
SHA512
2862dc769344abc65dcf3387df6bf0de56e7f36896b89b0937e83173ba97052fa1955c5c65eefb599b776a4dc5007fc2c26f14c43e0ab75c1081b414e77160bf
-
SSDEEP
6144:zFH8RIT6Fam1StJ3rXDW49Vl7SkDHPiaODgKYleQ4SWP:zWdGXDzP7aM+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2_JC.exe
Files
-
b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2_JC.exe.exe windows:6 windows x64
ce0c54abf9cb1706cf3f091f1f306b7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegFlushKey
kernel32
EnterCriticalSection
DeleteCriticalSection
GetCommandLineW
lstrlenA
FreeLibrary
WaitForSingleObject
SetEvent
RegisterApplicationRestart
LoadLibraryW
Sleep
CreateEventW
WaitForMultipleObjects
HeapSetInformation
GetCurrentThreadId
CloseHandle
GetVersionExW
GetProcAddress
GetSystemInfo
GetFullPathNameW
WideCharToMultiByte
ReadFile
GetProcessHeap
SetEndOfFile
GetCurrentDirectoryW
VirtualQuery
SetThreadStackGuarantee
VirtualAlloc
VirtualProtect
FlushFileBuffers
SetStdHandle
CreateFileW
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
HeapSize
GetOEMCP
GetACP
GetCPInfo
OutputDebugStringA
RtlCaptureContext
RtlVirtualUnwind
lstrlenW
GetModuleFileNameW
GetFileAttributesW
LeaveCriticalSection
GetSystemDirectoryW
InitializeCriticalSection
WriteConsoleW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
FlsAlloc
GetCommandLineA
GetStartupInfoW
GetLastError
HeapFree
HeapReAlloc
ExitThread
FlsSetValue
FlsGetValue
CreateThread
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
EncodePointer
DecodePointer
FlsFree
SetLastError
user32
UpdateWindow
SetWindowTextW
DispatchMessageW
EnableWindow
DestroyWindow
SetTimer
GetWindowRect
PostQuitMessage
PostMessageW
KillTimer
MsgWaitForMultipleObjects
GetKeyState
SetForegroundWindow
GetFocus
DialogBoxParamW
CallNextHookEx
IsWindowEnabled
GetWindowLongPtrW
GetClientRect
SetFocus
TranslateMessage
IsDialogMessageW
LoadIconW
GetWindowLongW
PeekMessageW
GetDlgItem
EndDialog
GetDesktopWindow
SetWindowPos
LoadStringW
CheckDlgButton
ShowWindow
CreateDialogParamW
SetWindowsHookExW
AdjustWindowRectEx
UnhookWindowsHookEx
MessageBoxW
SendMessageW
comctl32
ImageList_Create
ImageList_ReplaceIcon
ord17
ImageList_Destroy
comdlg32
GetSaveFileNameW
shell32
ShellExecuteW
ole32
CoUninitialize
CoInitialize
CoInitializeSecurity
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
Sections
.text Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ