Behavioral task
behavioral1
Sample
jxszdjp.exe
Resource
win7-20230712-en
General
-
Target
jxszdjp.exe
-
Size
1023KB
-
MD5
5f6a5e59586760420c29a82336845e25
-
SHA1
9c078d849c2505576d98cf9e8b0e30c777e06bc7
-
SHA256
87c160843bc0bdcd754a151c288f899763494385830016c299245f1fe9354b54
-
SHA512
bb77c4a584eeae46a8e64f9c0e1a6d749ad869e6ca0951ac030ff85ec4239a985f8fd9307af29c2e15e6a16e1227bd55696d78fa9b424fcb0cfd337e5f4bf1da
-
SSDEEP
24576:p9i31nCX+v7ucalwTGn+bgzb/KmdpNY0R:p9i31jv7ucaCTGuYJdpNY0R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource jxszdjp.exe
Files
-
jxszdjp.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 828KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 870KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE