Behavioral task
behavioral1
Sample
1a07d09e0c93802b7e94c403480c3643_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1a07d09e0c93802b7e94c403480c3643_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
1a07d09e0c93802b7e94c403480c3643_JC.exe
-
Size
591KB
-
MD5
1a07d09e0c93802b7e94c403480c3643
-
SHA1
6413c5007d2db1ab15e14bca58a7c82999d2fdbd
-
SHA256
65c61d9e8d47a372793e4e0157228bfb0b57cdf98abe045ee89d33d7ab428e9a
-
SHA512
5ee8a46e55c92a9c6ce12e1a335847a8db53d00f23e1f8ea68bd38e35d0ed020d246e80a1e3ed843c699ff6f69a50ab709aba0480978437e29405261bdfdbb21
-
SSDEEP
6144:yZfec9EbXDk6RkQKAguHOSq/UOPSe570SzO:yZWtI6RkmJOSNOB0Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a07d09e0c93802b7e94c403480c3643_JC.exe
Files
-
1a07d09e0c93802b7e94c403480c3643_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE