Behavioral task
behavioral1
Sample
c3edc198fd6c3a868a5044384ee931f8_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c3edc198fd6c3a868a5044384ee931f8_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
c3edc198fd6c3a868a5044384ee931f8_JC.exe
-
Size
470KB
-
MD5
c3edc198fd6c3a868a5044384ee931f8
-
SHA1
eb3cadbc0766eb105c6377a8fe7ba32745de9276
-
SHA256
bd5b6d817f61dfb7604c5ccd820b752cc50e60212b26da488658c8b45815a0ec
-
SHA512
43a25b1b296dffaecfccb9baf569e61a2dd11307d2c6380f2860a515651547fee8d6e3ee7287703756aa87f3b7258e41fdf39415cf5d98f00d35d5223a285d79
-
SSDEEP
6144:WdspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70NqG:s8kxNhOZElO5kkWjhD4AI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3edc198fd6c3a868a5044384ee931f8_JC.exe
Files
-
c3edc198fd6c3a868a5044384ee931f8_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE