Behavioral task
behavioral1
Sample
b46bb81bba0f007e1cd00513446bb50b_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b46bb81bba0f007e1cd00513446bb50b_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
b46bb81bba0f007e1cd00513446bb50b_JC.exe
-
Size
448KB
-
MD5
b46bb81bba0f007e1cd00513446bb50b
-
SHA1
98ecd6618de39bd6217a5c44d7d5a77e59fa5398
-
SHA256
4b88e219191c7e021f76abaecf074267f8e04b0125caef2e893b1e74fa0be95c
-
SHA512
50eb5ab58406ee1b1a566f9d24a36e7b117cd3909ad27e034095c9ce3995f2a1c29f6fcd5057ee456064d742e1c0b817577b744f01052ed9ef6860c8677bf42e
-
SSDEEP
12288:SEQoSuYrnGX73z6VO/hODyQxMSlheAtcqT3T2Z88D2Vz//rq:ScYrGX7j1/kFxMSlhelZ81Vfq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b46bb81bba0f007e1cd00513446bb50b_JC.exe
Files
-
b46bb81bba0f007e1cd00513446bb50b_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i Size: 512B - Virtual size: 4KB