Behavioral task
behavioral1
Sample
6fdcaf10ce48322953c923cc34e25e31_JC.exe
Resource
win7-20230831-en
General
-
Target
6fdcaf10ce48322953c923cc34e25e31_JC.exe
-
Size
364KB
-
MD5
6fdcaf10ce48322953c923cc34e25e31
-
SHA1
d9d373783a343461a79e2e58ba03ab02f4480195
-
SHA256
bd3c6e3cc4f47e5ac2a904c94e3bd583ad5982ae78af228e45312febf4a144b1
-
SHA512
791aba5f8d2ac25ed611468745a18dd661ed35282c0995c47bcbad8a1f9e2f6c33b592e400bd37c39f3e5bfe6e647644c26083e81440659a90e9ed799e54c96d
-
SSDEEP
6144:QYml0tyeXfs81owi4yoshiGGrcxV8HkaIHkvxDzU+0md/XAKqTX:NmXEfs81VJbryVYkaIHkvx/UX0AVz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fdcaf10ce48322953c923cc34e25e31_JC.exe
Files
-
6fdcaf10ce48322953c923cc34e25e31_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE