Behavioral task
behavioral1
Sample
fce4d57de8395788e3b0d177da7acf72_JC.exe
Resource
win7-20230831-en
General
-
Target
fce4d57de8395788e3b0d177da7acf72_JC.exe
-
Size
319KB
-
MD5
fce4d57de8395788e3b0d177da7acf72
-
SHA1
6356518140ef514fbd08e76a4f21d45a6c2814a5
-
SHA256
0c515b77700067e96cf4dd6f9b116c13ad99f860aa05d44a6471bc507512ee1d
-
SHA512
786f0de293244ee6d47e107712b155390aad821483d03be65f3028a760f78b61952b68fe8ec4ba3c17516952700cb99eaf97b6358bb4c8edb02263325de22391
-
SSDEEP
6144:VVt3e7IGxPYznDw3dmy/EBB6q1gBFJV6AvRqsf6YU+FM+3Yn/fCXjQGDqF:VVtWI6PYznWd1/Tq+Xxvo0U+d3s/fCXK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fce4d57de8395788e3b0d177da7acf72_JC.exe
Files
-
fce4d57de8395788e3b0d177da7acf72_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE