Behavioral task
behavioral1
Sample
52daf15cd60682a58cba58198c5d90b3_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
52daf15cd60682a58cba58198c5d90b3_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
52daf15cd60682a58cba58198c5d90b3_JC.exe
-
Size
900KB
-
MD5
52daf15cd60682a58cba58198c5d90b3
-
SHA1
973be512287de42645065ec0b3679a81b3e497bd
-
SHA256
c570c4accae88284a02ad991ad338d4787ed0e7e6e9e4688f76fa8d441eb9b04
-
SHA512
7241835b3a09de40c7c501ce05fcb08fa1c1ed6c595e65b6f65777bd9fba4a3a30fb6b5a40382715f45bb0f5b9acf78b92916f09b38f28cf90bef8448fef7bc9
-
SSDEEP
12288:SzzccmOfwRGd4hL/lpHXNU7h3tikC2txjka1sCf1JMr7MBOdF1kaYBDO:SBmOfwRPxtZu7h9FPtrdNJqMOdFQO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52daf15cd60682a58cba58198c5d90b3_JC.exe
Files
-
52daf15cd60682a58cba58198c5d90b3_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ