Static task
static1
Behavioral task
behavioral1
Sample
New order 0849948883993.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
New order 0849948883993.exe
Resource
win10v2004-20230915-en
General
-
Target
180bacd0deab4cc7eca4e9e699c94924487776868ac27d50bf631983bc58ba1c_JC.xz
-
Size
19KB
-
MD5
e5c219ec982ec3dd9a380fd92c33fb2d
-
SHA1
7f61a5e81e83421d4aeb5828a0b8e5db3f5fdc64
-
SHA256
180bacd0deab4cc7eca4e9e699c94924487776868ac27d50bf631983bc58ba1c
-
SHA512
849af706f05ca31bd87fffb162e1b32bace86d508d2cc7294afde38c8cdb80aca8b5dd01029909cedb944369594a91f19e4fc54dcc3433a06da0750f9dfbbd93
-
SSDEEP
384:WQvLB1F5Rrjwng2L68fjjEjUgJOVcL02db3/qmkW5h:WQl+t2HjOVo/NkO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/New order 0849948883993.exe
Files
-
180bacd0deab4cc7eca4e9e699c94924487776868ac27d50bf631983bc58ba1c_JC.xz.rar
-
New order 0849948883993.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ