Behavioral task
behavioral1
Sample
0e4c56f4cd23e8d4ac1a7066ad4dc691_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0e4c56f4cd23e8d4ac1a7066ad4dc691_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
0e4c56f4cd23e8d4ac1a7066ad4dc691_JC.exe
-
Size
228KB
-
MD5
0e4c56f4cd23e8d4ac1a7066ad4dc691
-
SHA1
3c4a689cd8fe1023a3d4bfc5caceb4d6e65943fa
-
SHA256
e96ca9869d5c99528733e88cedfd1031a0a09484b4007fb9272e235356a976fe
-
SHA512
1ac0364b46f85b05bca64115d678e4479961b6d4060c4ddd0fb8e497d59bb22d63a84926de4a70c3d50578a47a254225c7ee7f1c07b0c5cdde0362b68da8d350
-
SSDEEP
3072:t/jbLl/gvQoutg+wuvImsiBOqI5o+1E/wU+9VO4dhhhz+rDKUGc+Gm9JAMlpknHp:VjluQoS5wumaNI5JUa3jhnUIhUBf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e4c56f4cd23e8d4ac1a7066ad4dc691_JC.exe
Files
-
0e4c56f4cd23e8d4ac1a7066ad4dc691_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB