Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Jacard.164525.14861.597.exe
Resource
win7-20230220-en
General
-
Target
SecuriteInfo.com.Variant.Jacard.164525.14861.597.exe.bin
-
Size
256KB
-
MD5
54589e90692d0f4ce1ee922961631ba9
-
SHA1
612701ec9b7f7c7d6d0216f2c2fc9c40b3d364d2
-
SHA256
552b0efe0cd029702adb947989689bd21bd63c6115e9fcfd86d6caf7c16d040d
-
SHA512
5b34bac4f279488d0a08b1f9b431e25435015c73b9c373c3c99ce6116da5be42e9e6d3ee25cc574be985700dd67f328be4b4e45a05e4775a7f78d18a197457ed
-
SSDEEP
6144:RAseXXAq9+LxGo1s7yOluL8Q4EvJJMMq/grXb5zWsWCzyeWYo8oS:es6XqLfjX4EvLMMq6Xb5iVCzyeVo8oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Variant.Jacard.164525.14861.597.exe.bin
Files
-
SecuriteInfo.com.Variant.Jacard.164525.14861.597.exe.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 251KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE