Behavioral task
behavioral1
Sample
4e111d3edeef54fc45ba987788397e1d_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4e111d3edeef54fc45ba987788397e1d_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
4e111d3edeef54fc45ba987788397e1d_JC.exe
-
Size
313KB
-
MD5
4e111d3edeef54fc45ba987788397e1d
-
SHA1
57d999c7ce93e2940220184d5cbea6ffd515c55c
-
SHA256
a40593dd7e21bdf6ff0966d40d954e879eb610244505592969699bea5b8d4c3e
-
SHA512
b67806adccbf00f90351138b4df9f4810274b10ab5459b6e9ecffa55333ef5d5554d74ce76f4b3f942c511dde4133f12ad485db9bbaa04cf4556de3a9ce2c2c0
-
SSDEEP
6144:YjluQoStIo5R4nM/40yJdFV5idO/rN8HPhkAwcrnqosIlJwCyIxhTz/AFuK:YEQoSnqh+dOhCJAcDRsIlNBhf4FB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e111d3edeef54fc45ba987788397e1d_JC.exe
Files
-
4e111d3edeef54fc45ba987788397e1d_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB