Static task
static1
Behavioral task
behavioral1
Sample
P.O 2023-03700581.bat
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
P.O 2023-03700581.bat
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
P.O 2023-03700581.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
P.O 2023-03700581.exe
Resource
win10v2004-20230915-en
General
-
Target
e7d634f6bf4704a5cfc4f2cc847517331aa34c62fe233c18e6ca9d0dd9c307a4_JC.zip
-
Size
925KB
-
MD5
a9e5264a2d956b3c96b159d72efcd189
-
SHA1
c281988f3989a26caafc47ea3d3b8e00a166f37f
-
SHA256
e7d634f6bf4704a5cfc4f2cc847517331aa34c62fe233c18e6ca9d0dd9c307a4
-
SHA512
b06918577dbb8a7c0f45f8fae512868102cdf75fc0866a728a6483734e1927a313f53ab30eb350c7210c29049a1b137a28769c1e53eb4c4e6f7ffb330d1f3d76
-
SSDEEP
24576:ykTD7fStKDerxofDf3Hnf2DjF8IvvcHuA94SMvduMB:ya3qBxobvqF8KWu24Fd7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/P.O 2023-03700581.exe
Files
-
e7d634f6bf4704a5cfc4f2cc847517331aa34c62fe233c18e6ca9d0dd9c307a4_JC.zip.zip
-
P.O 2023-03700581.bat.bat .vbs
-
P.O 2023-03700581.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ