Static task
static1
Behavioral task
behavioral1
Sample
12bd16866eec69a87fd4e434190ff790_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
12bd16866eec69a87fd4e434190ff790_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
12bd16866eec69a87fd4e434190ff790_exe32_JC.exe
-
Size
282KB
-
MD5
12bd16866eec69a87fd4e434190ff790
-
SHA1
df76a0598d046a6734d5829874b5ca882e92c89b
-
SHA256
8f164429988a40a51944f0b12ec4f8218ed57aef35acd1174a18a26071c7478a
-
SHA512
166e82e26419758b2da05520ea3320ba9e1f220471c534589e5af5da13138a6a7fc90ade26817301526b55c41916eaf45e2a6b14877c0d138f495fece0284317
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJz0:rqpNtb1YIp9AI4Fz0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12bd16866eec69a87fd4e434190ff790_exe32_JC.exe
Files
-
12bd16866eec69a87fd4e434190ff790_exe32_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE