Behavioral task
behavioral1
Sample
JSWS.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
JSWS.exe
Resource
win10v2004-20230915-en
General
-
Target
JSWS.exe
-
Size
1.4MB
-
MD5
26e1454a755ff628edf5b7fb529ba87d
-
SHA1
98aefc582b2a57f6e085b2e6345c126a512d1fad
-
SHA256
9c88cbf73031d91ccf398a08fa6c98486bfe2bee89696db04fe9a30c6d66ae67
-
SHA512
c33404c2a392645bd338aec4a4f738e898373eede1486b32fea029c8d0b75398aa1af79414bb023173cb9826cf9194ed367d82d1610ef942c6dea2fcfd1fb745
-
SSDEEP
24576:GKgEYOZnqlIbbkvx2bFqo7qTj0KvFfUmQsxmQNyHnx3WVclKwwJE:GVOq8UgK+Wt4HxGbJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JSWS.exe
Files
-
JSWS.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE