bc5cf5b35ec88aea055e4cc622de24bd_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc5cf5b35ec88aea055e4cc622de24bd_JC.exe
Size

229KB
MD5

bc5cf5b35ec88aea055e4cc622de24bd
SHA1

d68e87c9f54021d37cc1dfae26c93830401bec6e
SHA256

82e255cac1a9782c89c00a79e86bb33457d61666aa1f3aaba4fe42fbea8a123b
SHA512

b01f2f01cc4120825bcbba22f83eb3d1a271749a25a38524dcc576e1ae95aa80295f98a9b1cdefbeb7cac1a1fdd5f90ac9422f1dd60ea3617ed8f5bee635c91e
SSDEEP

6144:TL+rqKbSFy5P5K3E5+yOqkXWCnluuf/B+ybSGwTuQM+bSsgbSxbSj:TLy95DK0kXWCnlhZFkufAIeu

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
bc5cf5b35ec88aea055e4cc622de24bd_JC.exe
unpack001/out.upx

Files

bc5cf5b35ec88aea055e4cc622de24bd_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 145KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE