Static task
static1
Behavioral task
behavioral1
Sample
0e49ba863dd4a1a3c78a3ec1423baf80_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0e49ba863dd4a1a3c78a3ec1423baf80_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
0e49ba863dd4a1a3c78a3ec1423baf80_exe32_JC.exe
-
Size
212KB
-
MD5
0e49ba863dd4a1a3c78a3ec1423baf80
-
SHA1
b9a98d52988a11ded232af5cbeae49f9915e920b
-
SHA256
32db758d3cff549ba6744749ae555771050684e5cb111b387d1102683528fd4d
-
SHA512
b80d9a582a5786eb0dd08057dad0eae87b81d74f8146ca8211dc310f5ed98cbbf07a98ec5b7507402a7af74ac585f49a0a7e376a532551d6994bfc33e8b36174
-
SSDEEP
6144:5gCtYTroR4/RUNWca+pOXOI2D4tC3lVWErD5a:t+0R4Wa+puON42D5a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e49ba863dd4a1a3c78a3ec1423baf80_exe32_JC.exe
Files
-
0e49ba863dd4a1a3c78a3ec1423baf80_exe32_JC.exe.exe windows:5 windows x86
ec7bb662d9136e46969a83e1a48c94c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetMessageTime
gdi32
SetViewportExtEx
advapi32
AdjustTokenPrivileges
shell32
ShellExecuteW
ws2_32
WSAStartup
oleacc
LresultFromObject
winspool.drv
DocumentPropertiesW
oleaut32
VariantClear
Sections
.text Size: 206KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE