Behavioral task
behavioral1
Sample
03bcbf09222b14exe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
03bcbf09222b14exe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
03bcbf09222b14exe_JC.exe
-
Size
55KB
-
MD5
03bcbf09222b14d20b5572bbb1b86656
-
SHA1
ec6591c74c3044250bbaf41e288b8e2b8626809b
-
SHA256
e608f787822bf9bdab534a325bbd890f6aa79c62273a0a1d4a5266790e221b88
-
SHA512
7ab06f44b6fe12cf799f4288872a7f3a8813958b0414e73d51aec3c969b6aa924d6d206b71db55ece5a3f04869469576e85280b58986eeb3ec1d3baee5584e7d
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBE2aJ8xjPY:zj+soPSMOtEvwDpj4kp1JWY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03bcbf09222b14exe_JC.exe
Files
-
03bcbf09222b14exe_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE