Behavioral task
behavioral1
Sample
93c9678c9c49936ccebca503d0588700_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
93c9678c9c49936ccebca503d0588700_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
93c9678c9c49936ccebca503d0588700_JC.exe
-
Size
755KB
-
MD5
93c9678c9c49936ccebca503d0588700
-
SHA1
9ea484ec32a1d8d0882d2238d8b348d562238b39
-
SHA256
6a3eb99218cc2435940afd1384039d069098f8fda39f21d70b50f542abeb2ded
-
SHA512
97be0a0109065d50199db1044c368b00805707a4b00e699bda40df4b46038416e455931c389728f02f68e211702c4ebf4fa10a9478cc5b72df6716faa641af69
-
SSDEEP
12288:W5MAXYg1i+vzM2pbwzt1XW8Jcy+jot4PvZhPg1PRc0j7NBQY6uvRE+aYyLTBnI3c:CpfpMt1XhJcyqotKZhP4PWQBFonI3ZcV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93c9678c9c49936ccebca503d0588700_JC.exe
Files
-
93c9678c9c49936ccebca503d0588700_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE