Behavioral task
behavioral1
Sample
1edb7c4db50fbf096c2a6784c5d188f6_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1edb7c4db50fbf096c2a6784c5d188f6_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
1edb7c4db50fbf096c2a6784c5d188f6_JC.exe
-
Size
446KB
-
MD5
1edb7c4db50fbf096c2a6784c5d188f6
-
SHA1
a0112c8765dc7d3b71d551314396c32f5e0f9824
-
SHA256
443cd071cb7851264b0e5c30d058a3fff0c5f9cc33e0288d0d4af2e9336d5706
-
SHA512
312609d7e574b0b9cfed3ff0828f6b6d97a5e9e359b42576b066089ca5d2a174b49e35abf78ce6cf7fb8fa8ac1c702434c3d57526346b04b93dcf52030010fff
-
SSDEEP
6144:SUSiZTK40DQ+RQ4LWfxWmZcazAii49XoaKu2tj:SUvRK4ADQ4LWfxWmZcazAii49Xoab2h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1edb7c4db50fbf096c2a6784c5d188f6_JC.exe
Files
-
1edb7c4db50fbf096c2a6784c5d188f6_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE