Behavioral task
behavioral1
Sample
262636c52cddaaexeexe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
262636c52cddaaexeexe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
262636c52cddaaexeexe_JC.exe
-
Size
101KB
-
MD5
262636c52cddaa7441ce109c9cd5d1bc
-
SHA1
9d8b2978e1e1677a1efb584ffb45bc421582a0de
-
SHA256
ddab44c2160940927775971198d28d098016d89379f6ddc1110cbddb92ed8dec
-
SHA512
736936531665b0412e341604c1f2f1af70559ee969a17dcd78d8de30c65c25e6c1ebcec2f8a80d97930bfb32f43ed305af7c7d09fda5bcf308224cd752cf4683
-
SSDEEP
1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn58+2/:1nK6a+qdOOtEvwDpjb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 262636c52cddaaexeexe_JC.exe
Files
-
262636c52cddaaexeexe_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE