Behavioral task
behavioral1
Sample
6c54c9644e8df9_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6c54c9644e8df9_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6c54c9644e8df9_JC.exe
-
Size
80KB
-
MD5
6c54c9644e8df9b842f1afdc44d74ac3
-
SHA1
70a42bc8cd7954962fae80d9f7c4ec521d96de60
-
SHA256
ade44bef369ca93c69c31f86a5cfe73b53c7c31f8c58c68ac4f33f993806440f
-
SHA512
77dd47b9dd92d9e7492dcbf0d4362f7bde83b3a5d2994f01a7ff617cd48854b878f4081dd2cc2e6198bf3eaf66a9ecbb698fa3775f956371fd6f13e9e9021f16
-
SSDEEP
1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalDSnU5X:1nK6a+qdOOtEvwDpje
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c54c9644e8df9_JC.exe
Files
-
6c54c9644e8df9_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE