General
-
Target
b064e74d04a9044110ef2d1b97bd8a8728981ce5506fb2095ca7af2711ec0d00
-
Size
108KB
-
MD5
9df09afc2b01c3ac3a2e9d77f0e40c7e
-
SHA1
3746377d6a5b8dfacf37223c0b7adf89b2684aa3
-
SHA256
b064e74d04a9044110ef2d1b97bd8a8728981ce5506fb2095ca7af2711ec0d00
-
SHA512
1e1dfd009de5053fdd481d252c4b0354a8df604c90afd15a0aa705dc2be564ca87d73c43222b30f0b599783f9d2fe046c3763bb1f364823b1dc939e4d9f7b1da
-
SSDEEP
1536:cKm1Yto64nsPFG+dODTb7MXC+Sh2NXaw5FHvJHje7GXrjiqv7id+1uJa5kASD5ME:l8Yul+dO7blPMvJy1qDid+1uJYktdHV
Malware Config
Signatures
-
resource yara_rule static1/unpack001/JFuooggU.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/JFuooggU.exe
Files
-
b064e74d04a9044110ef2d1b97bd8a8728981ce5506fb2095ca7af2711ec0d00.zip
-
JFuooggU.exe.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE