Static task
static1
Behavioral task
behavioral1
Sample
02a99e9705db6cd99e349d3ce1db4100_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
02a99e9705db6cd99e349d3ce1db4100_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
02a99e9705db6cd99e349d3ce1db4100_exe32_JC.exe
-
Size
96KB
-
MD5
02a99e9705db6cd99e349d3ce1db4100
-
SHA1
29e5df4ad114590ac1d80ff0b62ccb9c0c4daa35
-
SHA256
7b39dc35eea1e3be4441273752536fadede5b22e327ead7c425c33c359eb047e
-
SHA512
7906c9d057ac76e4b00fcb0129fd92a2d88f07887809ae18be8472520687bae27e89d3b766df55df55a2a9ff3e609e9ff6a504f4de9e63c903acba67e9920279
-
SSDEEP
768:zSabhxzazAw33VQQdMh/tQ4XWIfmSDpTg6Qb6aXAOzMA:DbhFby3SQdMh/tTXWIfbDjhaXAOzZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a99e9705db6cd99e349d3ce1db4100_exe32_JC.exe
Files
-
02a99e9705db6cd99e349d3ce1db4100_exe32_JC.exe.exe windows:4 windows x86
82cedb12d90ebc9b82cb1b1846446517
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExW
LoadCursorW
LoadIconW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
SendMessageW
DestroyWindow
DialogBoxParamW
BeginPaint
DrawTextW
EndPaint
PostQuitMessage
SetFocus
EndDialog
CreateWindowExW
kernel32
GetTickCount
LoadLibraryA
CreateFileA
GetSystemDirectoryW
CloseHandle
CreateFileW
LoadLibraryW
GetStartupInfoA
ReadFile
GetModuleHandleA
GetCommandLineW
gdi32
CreateSolidBrush
DeleteObject
GetStockObject
SetTextAlign
comctl32
InitCommonControlsEx
shell32
CommandLineToArgvW
DragFinish
ExtractIconA
crtdll
_local_unwind2
_global_unwind2
_fmode_dll
_commode_dll
??2@YAPAXI@Z
_initterm
_acmdln_dll
exit
_XcptFilter
_exit
__GetMainArgs
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ