Behavioral task
behavioral1
Sample
NA_0a1e18b407a883exe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
NA_0a1e18b407a883exe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
NA_0a1e18b407a883exe_JC.exe
-
Size
64KB
-
MD5
0a1e18b407a8835ca4cac64889577c1d
-
SHA1
c1ece459437524aac596a06f763342d142f97941
-
SHA256
0b552b30e6d0ab7dba5d5d84277aa5f943387c62d35727518b0af7c80352aa68
-
SHA512
cae39cff29261761b7b14523ab393806aec143a911c944cc2f873ff5b01929775e5e5bb1cb6e1cf44ab4d31be0361a969e4b4f677554fe3da812e903cbc28c0d
-
SSDEEP
384:z0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26JWFpSMYkW0NrD5v6ntOOtEvwDpjqIH:zQz7yVEhs9+8wMJP6ntOOtEvwDpjF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NA_0a1e18b407a883exe_JC.exe
Files
-
NA_0a1e18b407a883exe_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE