Behavioral task
behavioral1
Sample
02d7f4490bdf3eeef03a9fd5ff22def0_exe32_JC.exe
Resource
win7-20230831-en
General
-
Target
02d7f4490bdf3eeef03a9fd5ff22def0_exe32_JC.exe
-
Size
149KB
-
MD5
02d7f4490bdf3eeef03a9fd5ff22def0
-
SHA1
6a612d88e50e801510edc86ad3377ca42a9b838b
-
SHA256
dfb31fb7d4e74648cc8a94c383868ab06a94c1836e4e009e05fbdb06c8b4c8b8
-
SHA512
9ee0f6d22f81f4e691a4b4dfd87149f27a8d1655a825abcfcf285b5b7132ca3bebd95d45c824922d43c4a166783c3b805e9f8d7f703cc66cc5703d005a6813d4
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4tFNwqsLnYz7:kcm4FmowdHoSphraHcpOFltH4tFI7Yf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d7f4490bdf3eeef03a9fd5ff22def0_exe32_JC.exe
Files
-
02d7f4490bdf3eeef03a9fd5ff22def0_exe32_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE