Overview

overview

10

Static

static

1

1b144c08fe...JC.exe

windows7-x64

10

1b144c08fe...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    1b144c08fe6d2f1233097067e5957b097a990154946e3cd359271db5aac1d4d5_JC.exe
  • Size 517KB
  • Sample231013-dee8wabf2v
  • SHA256 1b144c08fe6d2f1233097067e5957b097a990154946e3cd359271db5aac1d4d5
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs
    installer

File Explorer

  • 1b144c08fe6d2f1233097067e5957b097a990154946e3cd359271db5aac1d4d5_JC.exe
    .exe 517KB

1b144c08fe6d2f1233097067e5957b097a990154946e3cd359271db5aac1d4d5_JC.exe

  • IMPHASH 3abe302b6d9a1256e6a915429af4ffd2
  • SHA256 1b144c08fe6d2f1233097067e5957b097a990154946e3cd359271db5aac1d4d5
  • MD5 SHA1 SHA512 SSDEEP
windows:4windowsx86

PE Signature issue

Digest
b4:cb:66:c7:37:b6:b3:36:ae:fb:5a:fd:a8:d9:9d:3a:fe:a3:7d:49:c3:f2:ee:e4:26:2e:aa:1d:aa:23:4e:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
OU=Einkorn Flageoletter Hypermoralskes\ ,O=Tarai,L=Caen,ST=Normandie,C=FR,1.2.840.113549.1.9.1=#0c18417274687269746963616c6c7940426c6462756e642e536e
Chains

Oct 12, 2023

Minor OS version
0
Major OS version
4
Entry point
12758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths