Behavioral task
behavioral1
Sample
7d182fc6bd1a8dcde75a39b62901854f_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7d182fc6bd1a8dcde75a39b62901854f_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
7d182fc6bd1a8dcde75a39b62901854f_JC.exe
-
Size
669KB
-
MD5
7d182fc6bd1a8dcde75a39b62901854f
-
SHA1
3505961b78db80b2b75f57da7a7ebbdc8a68f854
-
SHA256
31fd16391d8af79e1342f96ec5c440d2b8b6e6c6d7ff297253f57a6b6ae2a321
-
SHA512
9180e713aed36db1de25ab98be65e4bee5718fb0a5cd4541b9c39924a7f4bee61b1d59b7faf7651155ac9b01339495dc1d0b3b686bb2c04279da1459b94b65f6
-
SSDEEP
12288:sPKLXqpNa7AC/aHyDuGzg1vqiw/MpAJP5E6+Zq30ozU6Zb13QBGE2Ga:sSLkgs/bgV/262uhwCbeGya
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d182fc6bd1a8dcde75a39b62901854f_JC.exe
Files
-
7d182fc6bd1a8dcde75a39b62901854f_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB