Behavioral task
behavioral1
Sample
7fccaa2b7a076fc8bf87508946cfa14e_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7fccaa2b7a076fc8bf87508946cfa14e_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
7fccaa2b7a076fc8bf87508946cfa14e_JC.exe
-
Size
709KB
-
MD5
7fccaa2b7a076fc8bf87508946cfa14e
-
SHA1
e108ca388dd7329549f3ab2a3ed19ae0e7d2e008
-
SHA256
af0a62f873144e645dc2f40e2af0a9887b7a8b2b1ba471e56d8f837e71c7e48b
-
SHA512
2ae567f013212cd4f1e1e62fb5b23c2fb8682577a8e6fc74f381f4e7dda950b9eee0ae721fee430d7fa86d613f7e201a13b7634757e474c4e201f1eb1f3d015d
-
SSDEEP
12288:TLySlYVkeYo/LNAUv0sYu+AaeeeiuJPL+BNwADy+bpEC6ks97Ci+QE+sxgr6b:T+SlUkeYo/LNAUvpYCahenEGd+GDW6r+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7fccaa2b7a076fc8bf87508946cfa14e_JC.exe unpack001/out.upx
Files
-
7fccaa2b7a076fc8bf87508946cfa14e_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 145KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE