Behavioral task
behavioral1
Sample
2f0167fbfd81e4a278cd6d8f216e9fe0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2f0167fbfd81e4a278cd6d8f216e9fe0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2f0167fbfd81e4a278cd6d8f216e9fe0_JC.exe
-
Size
328KB
-
MD5
2f0167fbfd81e4a278cd6d8f216e9fe0
-
SHA1
195daad3906cdc5a50eb6b2cc772fdc39aaa7525
-
SHA256
494eb6c4d113bde2b7759869d907e5e6e2206fe0c0b71f70070f0baccabf914f
-
SHA512
aff8c4cf53b2935697f876b4369a04da00541eaad97b8b6e321b75247767120c90289f5205c53d64b3d9ed3b9cb26b0f5817ea883eb8229e7ed4461f86a93f49
-
SSDEEP
768:wapYjWydZNHVzXW6aFMl2wQAYvZzapYjWydZNHVzXt6aFMl2wQAYvZ:w2YjWjMloz2YjW4Mlo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f0167fbfd81e4a278cd6d8f216e9fe0_JC.exe
Files
-
2f0167fbfd81e4a278cd6d8f216e9fe0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE