Behavioral task
behavioral1
Sample
00078e959e25f79dbe4029b4604fa50d_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
00078e959e25f79dbe4029b4604fa50d_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
00078e959e25f79dbe4029b4604fa50d_JC.exe
-
Size
686KB
-
MD5
00078e959e25f79dbe4029b4604fa50d
-
SHA1
b5d79cbe4d20a1c0666020e2e729699de6327b21
-
SHA256
7c574566bed626e6bc94c72cdb7a3b74cee10754c5e69192c0cf6737b1395540
-
SHA512
8263a48aed6bd0f3c2bf062b83d7e997ca516bce0d7379c1ae4c81aabb2a965399cc3e0ebaacf8b1743194132e1b3ffc34d207042d6599e5d53dda7379116a35
-
SSDEEP
12288:AdMNc/JsQ2HadXAcJZYUtB2cXEK79R9cKNpXP2vEEtlLv1WLFR44:XiJEadXN/vB2cX3hRxPctFq44
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00078e959e25f79dbe4029b4604fa50d_JC.exe
Files
-
00078e959e25f79dbe4029b4604fa50d_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE