Behavioral task
behavioral1
Sample
bb0407639c96d4_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
bb0407639c96d4_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
bb0407639c96d4_JC.exe
-
Size
74KB
-
MD5
bb0407639c96d485107f37ead9fdd3cb
-
SHA1
f579f1962a60df4814e8cd57e3927c189e0caf00
-
SHA256
305d592513b94e5dd1bb59ad928e0d7c759bb303ef9f52cc147a3d0bcaf83edf
-
SHA512
393fe5f8e3bffabb0ee0d2e091505bcf2db51a554a2e4e701b35d4aa15447d54f44b524fdd7de887071e92ba2863010bc06e0adcfceed1a91b870f299a6365a0
-
SSDEEP
1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalDSV:1nK6a+qdOOtEvwDpjn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb0407639c96d4_JC.exe
Files
-
bb0407639c96d4_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE