Behavioral task
behavioral1
Sample
8f71a62f6cbdaf5b6caa8e37ca41ba70_JC.exe
Resource
win7-20230831-en
General
-
Target
8f71a62f6cbdaf5b6caa8e37ca41ba70_JC.exe
-
Size
1.6MB
-
MD5
8f71a62f6cbdaf5b6caa8e37ca41ba70
-
SHA1
130b434caf555feeeda64b48a3d5db1ddb3ce6ec
-
SHA256
b6ab643cfaee1b3161458dfa6112ccfb57177774536bb54f0d5867011b681d76
-
SHA512
983860b0d1032e9b8923dc46c55a088236e93624c2b97febf4a57cfa082e559bbcd2d890016a568f4804dbb3e3f179d8b423b8171d4c0bfc128d46413e86ff2d
-
SSDEEP
49152:hpjbazR0vKLXZQ/OgKCYq+ocU7DM4ikf3gRe3ewtnwoo:7atuKLXZQ/ODCYq+ocU7DM4ikf3gRe3+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f71a62f6cbdaf5b6caa8e37ca41ba70_JC.exe
Files
-
8f71a62f6cbdaf5b6caa8e37ca41ba70_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ