Behavioral task
behavioral1
Sample
7c464730639d737df97a3cf69abb1bc1_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7c464730639d737df97a3cf69abb1bc1_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
7c464730639d737df97a3cf69abb1bc1_JC.exe
-
Size
885KB
-
MD5
7c464730639d737df97a3cf69abb1bc1
-
SHA1
00f5bb4ba2d4c7e0c933eacfcb74e1f2acaa4a01
-
SHA256
7f826137f9b94cdd7b8ca75069fe6bf01d6dba3fd2ffa1c01957106869ccc202
-
SHA512
dd4c89a9cdec4867f50e925652332377989afed17896e6e122dbbced84541267231e1cecbb7a2b54e56240b3666e1680004d7ea091d5cdaabc8abc20343b6c60
-
SSDEEP
24576:aau1R6Q9pp5OOXy814bb3HxFgNZfEpQLpNneZyKxSmNJ7xYAX3U:447xnHU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c464730639d737df97a3cf69abb1bc1_JC.exe
Files
-
7c464730639d737df97a3cf69abb1bc1_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE