Behavioral task
behavioral1
Sample
64fca7fd3f5aa30bbf9c9d4bf0ea01798b1c2203f3f42b1bb8d811e4ae4aac5c_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
64fca7fd3f5aa30bbf9c9d4bf0ea01798b1c2203f3f42b1bb8d811e4ae4aac5c_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
64fca7fd3f5aa30bbf9c9d4bf0ea01798b1c2203f3f42b1bb8d811e4ae4aac5c_JC.exe
-
Size
1.7MB
-
MD5
db834f902ad19797c58eb953b14cdb03
-
SHA1
040abe2e37a114c36671515c4ed99e624af5278a
-
SHA256
64fca7fd3f5aa30bbf9c9d4bf0ea01798b1c2203f3f42b1bb8d811e4ae4aac5c
-
SHA512
aa40de1a9c2374a76e0f928c1ac35b5bb0e4fd5027abaccef3df4d19df2b78cca0575ea3f00d58124a9b47d97a4b51b1ffd277d4e6907f07bf62f9483142caeb
-
SSDEEP
49152:5ZvBpS9//64jJOjDrR1Rky63LXZFF+JTRBq6duxcVps8IBR:5ZZG//lFOR1Rky67JFFIPduxcHst
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64fca7fd3f5aa30bbf9c9d4bf0ea01798b1c2203f3f42b1bb8d811e4ae4aac5c_JC.exe
Files
-
64fca7fd3f5aa30bbf9c9d4bf0ea01798b1c2203f3f42b1bb8d811e4ae4aac5c_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE