Behavioral task
behavioral1
Sample
f4df9ca3e92abef4f110ca0055831719_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f4df9ca3e92abef4f110ca0055831719_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
f4df9ca3e92abef4f110ca0055831719_JC.exe
-
Size
228KB
-
MD5
f4df9ca3e92abef4f110ca0055831719
-
SHA1
fc06b4f651ce6685815b19b20fbf7d06bbdece18
-
SHA256
486e9b521203bb8a3ada887b8ed705b213b5c2956d928536afefc2522441fde6
-
SHA512
467f22d7f61756191cc086a883a5930c60222b2b7efc67b06fa565e0c3d484e76e2cae8a467800d43633059cdcce4794fed1dbfcd4dd6f18f58398df5eca2318
-
SSDEEP
6144:sPDLCLmIo5R4nM/40yDbm7Xr0zquXst307WNIK:sPKLKqvIYmuXi38RK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4df9ca3e92abef4f110ca0055831719_JC.exe
Files
-
f4df9ca3e92abef4f110ca0055831719_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB