Behavioral task
behavioral1
Sample
8e9f52f09df65610efb127fdc32e8e3d_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8e9f52f09df65610efb127fdc32e8e3d_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
8e9f52f09df65610efb127fdc32e8e3d_JC.exe
-
Size
301KB
-
MD5
8e9f52f09df65610efb127fdc32e8e3d
-
SHA1
053ba0e7de266c471d22da283ce83626dfd49f9a
-
SHA256
360a824eaee664b9a9b776973d5c1833acfe7f3f16ed75304315bf062da7e1c0
-
SHA512
19f036f9f18d8ebaac164b3e9982c631db87602f3ae01096fa1ab37934470555df3ecb11bd5b4cf36b7d9ab35a466ef6149094c7a8da13981ed845c493c704ca
-
SSDEEP
6144:9Zl23KYURecHw22Hc7bt00qK7e9NLCR/qoMytZ7o5SFKk5:9m3iRecHw228OWe9pEqJYZ8E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e9f52f09df65610efb127fdc32e8e3d_JC.exe
Files
-
8e9f52f09df65610efb127fdc32e8e3d_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE