Behavioral task
behavioral1
Sample
JustCrypt0r.exe
Resource
win7-20240221-en
General
-
Target
JustCrypt0r.exe
-
Size
639KB
-
MD5
6ca0da17e695dfefca2ab65be516d447
-
SHA1
5a116472a8e83ec30ce803c9488b2ae783e29bac
-
SHA256
1ac28b2bde0a42f6f29b6ef85952816500c74bd59cc72ec085bfbd19510658df
-
SHA512
ca7411c7bff0648f7bd0ded2eae066b84336008befad93bcca0067681544a92da6b7ba9f5db5affd771d6c0fd02afd35de5e4db3ca9550f44287d36ac8b3a8bd
-
SSDEEP
6144:JV28ovrtekm8/gQh3I72DxZekNipSZQETcUkzJGLo86AcE8v5PX7FnYoSi9mK9ud:JoZrte6g8w2/hj2z6uvvYoSi9n9uNgH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JustCrypt0r.exe
Files
-
JustCrypt0r.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 371KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE