Behavioral task
behavioral1
Sample
BR_JC.exe
Resource
win7-20230831-en
General
-
Target
BR_JC.exe
-
Size
2.5MB
-
MD5
91519580ba491240ece3cf4daa8f2a79
-
SHA1
fb73c136c0316f5607d374f5497121ff7b908768
-
SHA256
ecad64e2cb8dcc58e3666fbdb52a4455769878837b8559b48c74259a2094eb10
-
SHA512
e994378943b27a35d8682d8c27a5ec8e6e954edb6882133e2fd99010d563bf7a926c3595ae641283039afdc45112a93fc252e4b5af670a3e0f9511268f86ff9f
-
SSDEEP
49152:KtVha9KI9AkZPq7LwDzXajLOB4IvOkVJ+1CtmVVBpUD0sDTITKQz:iVQ9XykrwLOB4uOW8oUVoRtQ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BR_JC.exe
Files
-
BR_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 269KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 198KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ