Behavioral task
behavioral1
Sample
a44b6a9bb8dadd_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a44b6a9bb8dadd_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
a44b6a9bb8dadd_JC.exe
-
Size
53KB
-
MD5
a44b6a9bb8dadd3cb4a448a3ee00e2e4
-
SHA1
e07e09892764b921780e893eec8c841d6cadabd4
-
SHA256
301337a27d15f228cbeb9c4ee07cca1c663b90e615d637a5e17c56390a90c327
-
SHA512
cc4859f4b27d7e9bdddedced4ce34b8065b3dddfc6dff52ed80b3a06d7ba4069bfc9dc9980b8b5efd1b2cddb22f35658f38e8e1b1b8f8153ee7a637a042c979b
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7pBlOW:zj+soPSMOtEvwDpj4ktBlP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a44b6a9bb8dadd_JC.exe
Files
-
a44b6a9bb8dadd_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE