Behavioral task
behavioral1
Sample
603ebd236b74bcf56e360e1dc491bb90_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
603ebd236b74bcf56e360e1dc491bb90_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
603ebd236b74bcf56e360e1dc491bb90_JC.exe
-
Size
174KB
-
MD5
603ebd236b74bcf56e360e1dc491bb90
-
SHA1
18be7db16e220208b39ea6a008870207562c4c07
-
SHA256
e57a0f4a05a7b5bc258d86791f4509732a284e92949dfdd0d717acd422fc9a41
-
SHA512
b71eee0606f733b5468ee383fc8500bf196a12589bfdd037f3f28a5b4637292f7eff9693024cf6c04ff234d25e9ee4a1fe1176272de78cdc63393405e3154c77
-
SSDEEP
3072:JjbLl/gvyDFep1Tj4mYWR/R4nkPR/1aVuyJNMk5VsV1bmrjpTvlMKN2+2auWb1tP:JjluyDM3Io5R4nM/40yJNMaVL/pTNzNr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 603ebd236b74bcf56e360e1dc491bb90_JC.exe
Files
-
603ebd236b74bcf56e360e1dc491bb90_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE