Behavioral task
behavioral1
Sample
20ee77d31f781399d011c426d572abab_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
20ee77d31f781399d011c426d572abab_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
20ee77d31f781399d011c426d572abab_JC.exe
-
Size
389KB
-
MD5
20ee77d31f781399d011c426d572abab
-
SHA1
737f633b6fab88ea8c31d51ef5a70fe1d3ab2089
-
SHA256
f29f4d8a65550dcf3505db061f8712fd665770addf5da08f300ac372d1c45a3d
-
SHA512
99938d6e7564233f32f8c21a2b6b37a836a6b1cea8db21fef2ea892ecb1c74d3c85c86f37497bc672f807ae2b08044ee53c8af78ac8306cd4996594a8735dfdb
-
SSDEEP
6144:NPDLCL+Io5R4nM/4eMIOCDvnR8hfYwK0ujDzJWQE14YaNyUUUmqvhG0IFNkENr8W:NPKLyqGMIOGZ8WZ0ujhWQ9yUUgveFj31
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20ee77d31f781399d011c426d572abab_JC.exe
Files
-
20ee77d31f781399d011c426d572abab_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB