Behavioral task
behavioral1
Sample
f7dd87de9175f129e799ff7c36528ac6_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f7dd87de9175f129e799ff7c36528ac6_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
f7dd87de9175f129e799ff7c36528ac6_JC.exe
-
Size
250KB
-
MD5
f7dd87de9175f129e799ff7c36528ac6
-
SHA1
c62e55a166ff5d1dc7aa98a78fe17e508ca35efc
-
SHA256
0eeda9def12a2f53df172ffa2086f28811552a18ea2e8e4a32e133c3bc6d6f71
-
SHA512
194e0dba258f2cfefc4451c2e43fdd3f11a2ae9aec7121e0aa8e37a5294e3a75960272a679f17369e40881cf141ec97eff3e16a4ad64c3edc667287a38a8c11c
-
SSDEEP
768:ae2Ze2Ze2Ze2Ze2Ze2Ze25TQO54LQTNKBUaHqNA3B2I7CvqUHL3l9zJ50KLf9z0C:qr51TNKbqNAx2I7CvquLHz7Llz0EL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f7dd87de9175f129e799ff7c36528ac6_JC.exe unpack001/out.upx
Files
-
f7dd87de9175f129e799ff7c36528ac6_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE