Static task
static1
Behavioral task
behavioral1
Sample
26fdb61eaec8f847b02e379a11ca4e40_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
26fdb61eaec8f847b02e379a11ca4e40_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
26fdb61eaec8f847b02e379a11ca4e40_exe32_JC.exe
-
Size
3.0MB
-
MD5
26fdb61eaec8f847b02e379a11ca4e40
-
SHA1
04bc980c160698f01d21c050f9364adbc2fc40fd
-
SHA256
3fee4eb2e098cc7c04cfd425c2559a7a3e4e23084608981f0e2509998fef6658
-
SHA512
d2a74d9008b6f4336b050b329a79e16f657b38ceab872e0fca3a55dfebbfe1e67fc1fa841337dd49efdc87b46671e8fc5a7c4b1fdb9263d33971a33fbc6b998a
-
SSDEEP
98304:LYkyn0Z5PhvdM951I7ojfUb+p8NvNDI77IwBI75:NtkfUb+AVsAB9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26fdb61eaec8f847b02e379a11ca4e40_exe32_JC.exe
Files
-
26fdb61eaec8f847b02e379a11ca4e40_exe32_JC.exe.exe windows:4 windows x86
ba7807ebf9a555d3bc65228d4a5cfef9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
wininet
InternetCanonicalizeUrlA
InternetQueryDataAvailable
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetConnectA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetCloseHandle
InternetOpenA
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
CM_Get_Parent
CM_Get_Sibling
CM_Get_Child
CM_Get_DevNode_Registry_PropertyA
CM_Locate_DevNodeA
dbghelp
MakeSureDirectoryPathExists
kernel32
InterlockedDecrement
lstrcpynA
lstrcmpA
ResumeThread
SuspendThread
DuplicateHandle
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetThreadLocale
DeleteCriticalSection
GetCurrentThread
GetFileTime
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
RaiseException
ExitThread
GetACP
HeapSize
InterlockedIncrement
SetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetModuleHandleA
Sleep
MulDiv
lstrcpyA
CloseHandle
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalFree
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
GetTickCount
EnterCriticalSection
LeaveCriticalSection
FormatMessageA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryA
CreateFileA
ReadFile
WriteFile
OutputDebugStringA
SetThreadPriority
CreateThread
CreateEventA
GetProfileStringA
TerminateThread
GetFileSize
MultiByteToWideChar
GetDriveTypeW
GetVolumeInformationW
WideCharToMultiByte
SetVolumeLabelW
FlushFileBuffers
GetVolumeInformationA
GetDriveTypeA
DeviceIoControl
InitializeCriticalSection
GetComputerNameA
UnmapViewOfFile
GetStdHandle
CreatePipe
CreateProcessA
GetSystemDirectoryA
LocalFree
LocalAlloc
lstrlenA
SetLastError
GetExitCodeProcess
LoadLibraryA
FreeLibrary
GetVersionExA
GetUserDefaultUILanguage
FindFirstFileA
GetFileAttributesA
lstrcatA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
FindNextFileA
GetLastError
FindClose
GetWindowsDirectoryA
GetModuleFileNameA
CopyFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetEvent
WaitForSingleObject
GetCurrentProcess
HeapReAlloc
user32
CharNextA
CopyAcceleratorTableA
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetScrollPos
GetTopWindow
MessageBoxA
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
PtInRect
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetClassNameA
IsIconic
GetSystemMetrics
DrawIcon
GetWindowTextA
IsWindowVisible
IsWindowEnabled
CharUpperA
WaitForInputIdle
LoadIconA
wsprintfA
GetFocus
GrayStringA
DrawTextA
TabbedTextOutA
ShowWindow
UpdateWindow
InflateRect
IsWindow
LoadImageA
GetKeyNameTextA
RedrawWindow
PeekMessageA
TranslateMessage
DispatchMessageA
GetNextDlgGroupItem
ClientToScreen
SetWindowRgn
ReleaseDC
GetCapture
GetCursorPos
WindowFromPoint
DrawEdge
OffsetRect
DestroyMenu
GetSysColorBrush
GetMenuItemCount
LoadCursorA
GetWindowRect
SetTimer
KillTimer
SetRect
GetSysColor
GetKeyState
PostMessageA
SetCapture
ReleaseCapture
InvalidateRect
DrawFocusRect
GetClientRect
LoadBitmapA
SendMessageA
GetDC
FillRect
GetWindowLongA
SetWindowLongA
CallWindowProcA
EnableWindow
GetParent
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
MapDialogRect
SetWindowContextHelpId
SetCursor
PostQuitMessage
GetDesktopWindow
GetMessageA
ValidateRect
LoadStringA
EndDialog
GetActiveWindow
GetClassLongA
CreateDialogIndirectParamA
HideCaret
UnregisterClassA
GetMessagePos
gdi32
TextOutA
Escape
CreatePen
GetClipBox
SetTextColor
SetBkColor
PatBlt
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
RectVisible
MoveToEx
LineTo
GetTextColor
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteDC
GetDeviceCaps
CreateRectRgn
CombineRgn
SelectClipRgn
DeleteObject
GetStockObject
GetTextMetricsA
GetTextExtentPoint32A
ExtTextOutA
CreateBitmap
GetPixel
LPtoDP
CreateCompatibleBitmap
GetMapMode
DPtoLP
GetBkColor
BitBlt
CreateCompatibleDC
GetObjectA
SelectObject
StretchBlt
GetTextExtentPointA
CreateDIBitmap
CreateSolidBrush
comdlg32
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
RegCloseKey
OpenServiceA
shell32
ShellExecuteExA
ShellExecuteA
comctl32
_TrackMouseEvent
ord17
ImageList_Destroy
oledlg
ord8
ole32
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoInitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoCreateGuid
CoUninitialize
OleFlushClipboard
OleUninitialize
OleIsCurrentClipboard
CoRevokeClassObject
olepro32
ord253
oleaut32
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
wsock32
WSACleanup
WSAStartup
Sections
.text Size: 908KB - Virtual size: 905KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256KB - Virtual size: 438KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ