Static task
static1
Behavioral task
behavioral1
Sample
34e1a75edc2faf8e23515214f20931e0_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
34e1a75edc2faf8e23515214f20931e0_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
34e1a75edc2faf8e23515214f20931e0_exe32_JC.exe
-
Size
207KB
-
MD5
34e1a75edc2faf8e23515214f20931e0
-
SHA1
1896fbccbf0b68b90b0254e7f80f1a72a21284fd
-
SHA256
c6efe99b5cbca045ad9344cb04b5c4960d8724c86d961384f98820a2d8adcce3
-
SHA512
cea544225f72c34378c39a63b93796a9af36a0dec481283a519b0a285e9912dbc614733b5ff298533c69e6d91c7c505c53872fb7d86e02e3ee1be0ba52116b5b
-
SSDEEP
6144:FBTULiVKToYhKjAM9siE6D618V/YekdiybPZ:FVUWVGKda5oyB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34e1a75edc2faf8e23515214f20931e0_exe32_JC.exe
Files
-
34e1a75edc2faf8e23515214f20931e0_exe32_JC.exe.exe windows:4 windows x86
8940b81b7b3c252e5b7510b630f0bd9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsW
GetWindowsDirectoryA
GetVersion
AddAtomA
CompareStringW
GetTempFileNameA
GetModuleHandleA
GetProcAddress
user32
DefFrameProcA
EndMenu
LoadMenuA
CreateWindowExA
IsMenu
CallWindowProcW
GetMenu
GetMenuItemInfoW
WaitForInputIdle
DestroyWindow
FrameRect
FindWindowA
keybd_event
GetCapture
CascadeWindows
WinHelpW
RegisterClassExW
CharLowerW
GetSystemMetrics
SetWindowTextA
AppendMenuA
EmptyClipboard
CreateDialogParamW
DefFrameProcW
GetMenuState
LoadMenuA
DestroyMenu
GetCapture
GetActiveWindow
GetMessageW
CreateMenu
GetDC
EnumClipboardFormats
LoadCursorA
SetDlgItemTextA
SetDlgItemInt
CallWindowProcA
GetWindowLongW
ShowCaret
GetMenuItemID
GetWindowTextLengthW
CheckDlgButton
wvsprintfA
GetSysColor
DialogBoxIndirectParamA
CharLowerA
DefDlgProcA
gdi32
SetWorldTransform
DeleteMetaFile
GetGlyphOutlineW
EnumFontFamiliesExA
GetDIBits
CopyEnhMetaFileA
GetColorSpace
SetSystemPaletteUse
GetArcDirection
FillPath
GetROP2
EnumICMProfilesA
CreateRoundRectRgn
SetViewportOrgEx
CreateFontIndirectExA
RectInRegion
GetTextExtentExPointW
EndFormPage
SetTextJustification
RemoveFontResourceW
advapi32
RegOpenKeyW
RegDeleteKeyW
RegRestoreKeyW
RegEnumValueW
RegOpenKeyExW
RegReplaceKeyW
ole32
CoGetObject
CLSIDFromString
CoGetCallerTID
wininet
IncrementUrlCacheHeaderData
HttpCheckDavCompliance
SetUrlCacheConfigInfoW
InternetSetFilePointer
GopherGetLocatorTypeW
InternetQueryOptionW
InternetSecurityProtocolToStringW
FtpFindFirstFileW
GopherGetAttributeW
CreateUrlCacheContainerA
InternetCanonicalizeUrlW
winmm
mixerGetNumDevs
waveOutOpen
waveInGetPosition
midiStreamRestart
winspool.drv
AddPortExA
EnumFormsW
oledlg
OleUIPasteSpecialW
OleUIPromptUserW
OleUIInsertObjectW
OleUIAddVerbMenuA
Sections
.f Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dHtj Size: 2KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xtoU Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uROSoW Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NenQvv Size: 5KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ