Behavioral task
behavioral1
Sample
e5230ecc1e7326exe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e5230ecc1e7326exe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
e5230ecc1e7326exe_JC.exe
-
Size
89KB
-
MD5
e5230ecc1e7326d4b32339798a459fc4
-
SHA1
b9bc6598800603163459e8257449724e17f55191
-
SHA256
63c23b4f147ebd38bbc08892c667690a2502e43715e777802e501ebc15cf1f78
-
SHA512
cddaea3b1410d04eca30a1b325bc2531b7469bd9dce11ed1d4c37642eca2c747cdb2e4a90f01048e1e38df699164545c6c39b51a484a0c503a7ea9e9cdd3fe5b
-
SSDEEP
1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDj9yZtX9:zCsanOtEvwDpjTN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5230ecc1e7326exe_JC.exe
Files
-
e5230ecc1e7326exe_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE