Static task
static1
Behavioral task
behavioral1
Sample
29472c2abb959e6ff57cc1ad8a1ddac0_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
29472c2abb959e6ff57cc1ad8a1ddac0_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
29472c2abb959e6ff57cc1ad8a1ddac0_exe32_JC.exe
-
Size
356KB
-
MD5
29472c2abb959e6ff57cc1ad8a1ddac0
-
SHA1
8d230357fe297538cba4beebe2b0d18c1a0eeff8
-
SHA256
891a0daa0885b5f75d5c5ce506813069854396b3d61262354218e5676d74a8cf
-
SHA512
b5a249a95827a6bd0906b7d8e80dba7473b684cbf78b35bc96495102eb3b447a90cab87726dcf39f999627bf6ad06981a09192fe34c85d2962bf7e51015b943f
-
SSDEEP
6144:zoZRkwFUREpL7+bSttpTi7EAvGRMadlQys3xhd4W94vQDSk4yK4tgLV8ZaUr:zkRkwFUREpL7+ai7EAvGRMYlQBKCWkXj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29472c2abb959e6ff57cc1ad8a1ddac0_exe32_JC.exe
Files
-
29472c2abb959e6ff57cc1ad8a1ddac0_exe32_JC.exe.exe windows:1 windows x86
d2a2814879f1f36982120ddb29b9af6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GetSystemDefaultLangID
GetUserDefaultLCID
GlobalAddAtomA
WinExec
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetProfileIntA
GetProfileStringA
GetWindowsDirectoryA
GetFileAttributesA
Sleep
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetDiskFreeSpaceA
WriteProfileStringA
GetTickCount
LoadResource
LockResource
FreeResource
FindResourceA
SizeofResource
GetSystemDirectoryA
GetModuleFileNameA
_lclose
_llseek
_lwrite
_lread
OpenFile
GlobalUnlock
GlobalLock
GlobalFree
GlobalReAlloc
GlobalAlloc
GlobalGetAtomNameA
WideCharToMultiByte
FreeLibrary
CreateFileA
SetStdHandle
VirtualAlloc
VirtualFree
GetCPInfo
GetOEMCP
GetACP
UnhandledExceptionFilter
RtlUnwind
ReadFile
WriteFile
CloseHandle
FlushFileBuffers
GetTimeZoneInformation
GlobalDeleteAtom
GetStdHandle
SetFilePointer
GetLastError
ExitProcess
MultiByteToWideChar
GetVersion
GetCommandLineA
GetEnvironmentStrings
GetStartupInfoA
GetLocalTime
SetEndOfFile
SetEnvironmentVariableA
GetFileType
user32
LoadAcceleratorsA
VkKeyScanA
keybd_event
GetLastActivePopup
GetParent
GetWindow
GetMessageA
IsWindowVisible
GetForegroundWindow
GetTopWindow
SetForegroundWindow
CreateWindowExA
SetWindowPos
UnregisterClassA
TranslateMessage
IsDialogMessageA
TranslateAcceleratorA
SetTimer
KillTimer
BeginPaint
EndPaint
MessageBoxA
PostQuitMessage
RegisterWindowMessageA
SendMessageA
MessageBeep
FindWindowA
GetWindowDC
ReleaseDC
InvalidateRect
UpdateWindow
GetDesktopWindow
GetWindowRect
GetSystemMetrics
DispatchMessageA
DestroyWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetKeyboardState
SetKeyboardState
FillRect
ReleaseCapture
GetCursorPos
DefWindowProcA
CheckMenuItem
TrackPopupMenu
DestroyMenu
PostMessageA
SetCursor
SetCapture
ShowWindow
SetWindowLongA
GetWindowLongA
LoadBitmapA
LoadCursorA
RegisterClassA
GetSubMenu
LoadMenuA
ScreenToClient
gdi32
MoveToEx
LineTo
SelectObject
GetStockObject
Rectangle
DeleteDC
PatBlt
CreateDCA
TextOutW
CreateFontIndirectA
BitBlt
GetObjectA
CreateCompatibleDC
DeleteObject
SetTextColor
SetTextAlign
GetTextMetricsA
TextOutA
SetBkMode
StretchBlt
Polygon
CreateSolidBrush
comdlg32
ChooseFontA
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 390KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ