Behavioral task
behavioral1
Sample
115e253390ad7909223a6a34fe716c47_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
115e253390ad7909223a6a34fe716c47_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
115e253390ad7909223a6a34fe716c47_JC.exe
-
Size
311KB
-
MD5
115e253390ad7909223a6a34fe716c47
-
SHA1
62dd626ae36f5a2a9c10f61077313f5e622440b8
-
SHA256
cf1286688ddb2188b5c3e830751feb791bc27d7c32280f28302eef9ab233774d
-
SHA512
b0aa5bccf413368d47fd7b98e9c8d3fbcf78989243c5af6864a60e549c18b524664c25a0f8f8da91c1d8c1844bf4e62b9265cd5dcf8f413334f7a104c671db0b
-
SSDEEP
6144:SjluQoSlcoFjCi16atxxyf6g9Mm/q+a1RqnJsmCQxr:SEQoSlcACi16a5o6gamDa1UJsexr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 115e253390ad7909223a6a34fe716c47_JC.exe
Files
-
115e253390ad7909223a6a34fe716c47_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i Size: 512B - Virtual size: 4KB