Behavioral task
behavioral1
Sample
c05b5b8b859b91_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c05b5b8b859b91_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
c05b5b8b859b91_JC.exe
-
Size
72KB
-
MD5
c05b5b8b859b91916fc3f603329ea591
-
SHA1
3e97e441a726222dd0b95deea8927998e9015d40
-
SHA256
799bed043ea06a56b578901c3a5081b07ce1ac84c6e6cf92949dc9219abb4dbe
-
SHA512
66dca5e0a49855c96b11038f0b7fc56485b838162585d1c0ff8c1d84d01869b17ccb1d0ef863bbd9de6aa45096574ba88342be5f93ca8a23c4cca2d6b676421c
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+oo:T6a+rdOOtEvwDpjNp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c05b5b8b859b91_JC.exe
Files
-
c05b5b8b859b91_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE