Behavioral task
behavioral1
Sample
063ecd1778abba690fdec037115318cac142c33900011315cbdee75ed54cbe4a_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
063ecd1778abba690fdec037115318cac142c33900011315cbdee75ed54cbe4a_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
063ecd1778abba690fdec037115318cac142c33900011315cbdee75ed54cbe4a_JC.exe
-
Size
2.7MB
-
MD5
a2cb77c13a04d95c3cde606d42c3cc95
-
SHA1
47c2e0ad45c81ca14ad9a31b862d6fa9c0bf17a5
-
SHA256
063ecd1778abba690fdec037115318cac142c33900011315cbdee75ed54cbe4a
-
SHA512
c8e17caeb2455666afe286e58540b1f41fdc4432f1bc145ea391d337efbce44639da5faa37e7fb4a583823a5ecd30fc7237a00e0c737e7fe43b6b69107669277
-
SSDEEP
49152:fyV7Qa/64DkFqZqhUgbAfundNWmzh+jwXY6LDh44JoKlbPJ0E3EMUa3glJG6F8kr:qtRb0qZbgKqxV+jwXYuDh33xxf0MrGlT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 063ecd1778abba690fdec037115318cac142c33900011315cbdee75ed54cbe4a_JC.exe
Files
-
063ecd1778abba690fdec037115318cac142c33900011315cbdee75ed54cbe4a_JC.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 8.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE