Behavioral task
behavioral1
Sample
e7eaf3e6dbc974506871507488601657_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e7eaf3e6dbc974506871507488601657_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
e7eaf3e6dbc974506871507488601657_JC.exe
-
Size
1.7MB
-
MD5
e7eaf3e6dbc974506871507488601657
-
SHA1
59bf26477686e4959aadd1082b92af2bc082f82b
-
SHA256
4d5400bb1ac7c627cd2bbbec7e1b66d51bbbc807b11833518be50e4c8d512902
-
SHA512
06a9e0e4c368ee30e4566780ac723f0ceb54d07901107a5dc12f6ba341089184c1c34506d6f4b2b2ef056344ab7d831b32cd6e3213e133a9aba5e9361e23a2d6
-
SSDEEP
24576:lUTrYB81Vkum7LdMYcCcPcKCfLtOuf3+DCWE9LgCZmjyAecNBT8uGJjsKqFUPB6A:+fs7LdTcBSgM9wjyeT8uVUwbxk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7eaf3e6dbc974506871507488601657_JC.exe
Files
-
e7eaf3e6dbc974506871507488601657_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE