Behavioral task
behavioral1
Sample
92763ed362de0b01188ebd23e7fcea73_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
92763ed362de0b01188ebd23e7fcea73_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
92763ed362de0b01188ebd23e7fcea73_JC.exe
-
Size
3.7MB
-
MD5
92763ed362de0b01188ebd23e7fcea73
-
SHA1
89675af5b4fd27f7399a464d953cc2f1415795f8
-
SHA256
e6c974423f8965f1ef7bf1f5e310e83328136b3248b3763deacf33093bf8bd90
-
SHA512
98e9f7c551e09fd338239483cfe5f66b08c6920f82f101e445acac27624fd4bb25bbc6bb45fceaf91ab0cd03d74889610ecc4820be631922c3e93ea6cba3e63c
-
SSDEEP
98304:OxlJ90Alzylo0FLse3JX5yOgrzMh4ukfwVVkTX5N:OxlflZ6sHg6uFV+TX5N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 92763ed362de0b01188ebd23e7fcea73_JC.exe unpack001/out.upx
Files
-
92763ed362de0b01188ebd23e7fcea73_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ