Behavioral task
behavioral1
Sample
a923afc7867e30dc0a4efe842d59bcc7_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a923afc7867e30dc0a4efe842d59bcc7_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
a923afc7867e30dc0a4efe842d59bcc7_JC.exe
-
Size
216KB
-
MD5
a923afc7867e30dc0a4efe842d59bcc7
-
SHA1
800497d8076c8ae0b199184b673b2bb1cb15302a
-
SHA256
3efba77516094d903e6feb15789cabbe5d1320058b2575c6162b95dff1a67def
-
SHA512
576462532f87c2f87b35c9209591952260c82454a056ef4eb65ce13fee4a3d279465d710dff22224ea113335d632610210a15895e11cc0faf7ca3dcd90ab2bb3
-
SSDEEP
6144:KUSiZTK40lUHTisQt9Nd1Kid908edttRURLwL:KUvRK4ZusQHNd1KidKjttRYLwL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a923afc7867e30dc0a4efe842d59bcc7_JC.exe
Files
-
a923afc7867e30dc0a4efe842d59bcc7_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE