Behavioral task
behavioral1
Sample
2b0ca3b80727a6a02f6414ecd7974110_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2b0ca3b80727a6a02f6414ecd7974110_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2b0ca3b80727a6a02f6414ecd7974110_exe32_JC.exe
-
Size
231KB
-
MD5
2b0ca3b80727a6a02f6414ecd7974110
-
SHA1
235319d7af88691931e8f3cd2cde68f8a8d653e7
-
SHA256
57f9b0c8422f023f96864394ea38dc70b569a859b8a3a86671b2cb27c11875b1
-
SHA512
ae65212186df3f99fd47205c1c31dcd44df0dc060589c6920c58e57bb49fd528014c9523bda8b8bee5babc79f94e8871617c9fd763aebf3b3cc9595e399e568b
-
SSDEEP
6144:2su1YDl4Ji96fO3TmfMkf5QNm9jFbX4Bnu:2rK4JnfO3qfv5X9jFDynu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b0ca3b80727a6a02f6414ecd7974110_exe32_JC.exe
Files
-
2b0ca3b80727a6a02f6414ecd7974110_exe32_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tsustu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE