Behavioral task
behavioral1
Sample
0c947916b8cde15fe057b1bf6fb7a00f_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0c947916b8cde15fe057b1bf6fb7a00f_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
0c947916b8cde15fe057b1bf6fb7a00f_JC.exe
-
Size
96KB
-
MD5
0c947916b8cde15fe057b1bf6fb7a00f
-
SHA1
c23b9d15072c5c9848812fafcdba580e94a1af77
-
SHA256
4b873d7eb3229b97d0c86b6a7514706c16a004e2b9faa38d52a25ecb78bb4faf
-
SHA512
773816a5c93dd40387b4e20cc8be858f52783bf1431f88fe7e7f5b1f59fa5c8fa606d8d2a0b8d7cdeb0301ff426a5de6ba6f94c1828d3c81cf41cd7f04fdd430
-
SSDEEP
3072:VjbLl/gvQoutv4DQ1Tj4mYWR/R4nkPR/1aVuymcjC:VjluQoSv4DSIo5R4nM/40ymcjC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c947916b8cde15fe057b1bf6fb7a00f_JC.exe
Files
-
0c947916b8cde15fe057b1bf6fb7a00f_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE