Behavioral task
behavioral1
Sample
993cc60805f68d_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
993cc60805f68d_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
993cc60805f68d_JC.exe
-
Size
101KB
-
MD5
993cc60805f68dfa5d03a485513fdace
-
SHA1
2f5c8add4a5953570281d5dccd41c5a99adcbbc3
-
SHA256
1f7ee59b3d3fdb5c668d3decb7b0cb8b206cd8ac65ed1c5327ea25d03c2277b9
-
SHA512
5aa2a4beeb8f1a6b84a995824b85251eec90b3ab23750b9178da104140d246067a20a4a270f4f71d11e6a6dc7e00d3d7a6accfb8bd5c88ad03f6b9512d589cc8
-
SSDEEP
1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn58+2Tfb/:1nK6a+qdOOtEvwDpjj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 993cc60805f68d_JC.exe
Files
-
993cc60805f68d_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE