Static task
static1
Behavioral task
behavioral1
Sample
073a60fd7379caba90a5782e31949470_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
073a60fd7379caba90a5782e31949470_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
073a60fd7379caba90a5782e31949470_exe32_JC.exe
-
Size
36KB
-
MD5
073a60fd7379caba90a5782e31949470
-
SHA1
e16629c43f33567d92bf688765a693bdfc2ff783
-
SHA256
f40db4167da28acbb37efc44e368384a0b9b2ef7c6e6005501bfd0d3b6555149
-
SHA512
4caf2deaa4800c5af87720d7a6cb4840301d2ff49a39eb53f1e96e8b3a1570155e7fccbdf2393d61a6a686a5753cda502e61d15791f9e593d69011ef3aa9f151
-
SSDEEP
768:1DG9EbjdoVIPbWHMRYMMDHjvEXj+ipe3HJ+ClzpfhyUGHLrVj:1j9o0bWwYMMHYj+ipe3J+ClJhPGHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 073a60fd7379caba90a5782e31949470_exe32_JC.exe
Files
-
073a60fd7379caba90a5782e31949470_exe32_JC.exe.exe windows:4 windows x86
d32dbacd95b4352b04222a840748ca46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetFileAttributesW
GetModuleFileNameW
CloseHandle
Module32First
CreateToolhelp32Snapshot
OutputDebugStringA
SizeofResource
LoadResource
FindResourceA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ