Static task
static1
Behavioral task
behavioral1
Sample
½ļ/jhch.exe
Resource
win7-20240903-en
General
-
Target
250f699983967eb8d766348bd1e5fd068a6b3d175c58a1e0b6744521e025ab2a
-
Size
73KB
-
MD5
c01ec11be1ae23ba7eabfd5444eefaea
-
SHA1
4521110d998f23634a708fd76a263f8ff36f35bc
-
SHA256
250f699983967eb8d766348bd1e5fd068a6b3d175c58a1e0b6744521e025ab2a
-
SHA512
23431ebe75f6b99eb2224bd29333418606e61fd8a3db2b62c2f2a66b351200ccd05b3eed5da7c9c68fff86c72fcde04c7fc12090a22a0cfd8754778e707e0f47
-
SSDEEP
1536:DB+827mq2tTTWX4UJ1diRuAtatWEgn8yxoIPzD5BceaQbPz:NgAdTWXD10niWEsdxZDceprz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/½ļ/jhch.exe
Files
-
250f699983967eb8d766348bd1e5fd068a6b3d175c58a1e0b6744521e025ab2a.zip
-
½ļ/jhch.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE