Behavioral task
behavioral1
Sample
035a0b889a5b7121580ce2e9b241dce0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
035a0b889a5b7121580ce2e9b241dce0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
035a0b889a5b7121580ce2e9b241dce0_JC.exe
-
Size
851KB
-
MD5
035a0b889a5b7121580ce2e9b241dce0
-
SHA1
973f84d7999b3c021014701e2d89b96b4ff73267
-
SHA256
3bb0fde39c8c4838011a750331d9b9c5b6d814dadd4772311f9500da6eab2953
-
SHA512
5b76a5d878c71269f00f8cb3d18ffdfb406551518a0ec928104bc2afc5caf545c250452f2c77963909a96dd1b4487d1752e02a82d00cb3c6e0aca11d99af32b5
-
SSDEEP
24576:XLT27VusS+29jfd9pCwMHIhfR50WG8Roe5na1tz:Xf0YVx9LXpCwmIZDPGIoe5nqz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 035a0b889a5b7121580ce2e9b241dce0_JC.exe
Files
-
035a0b889a5b7121580ce2e9b241dce0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE