Behavioral task
behavioral1
Sample
NEAS.bc4653fd5646d83b356f8cef3ca56112exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.bc4653fd5646d83b356f8cef3ca56112exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.bc4653fd5646d83b356f8cef3ca56112exe_JC.exe
-
Size
1.1MB
-
MD5
bc4653fd5646d83b356f8cef3ca56112
-
SHA1
2cbfdbb45c2588ace33cb4cf7f34956b570cbb07
-
SHA256
8529d3b99fe36de6d60b41b22e04df8e37177456c95f6db6b6f51e818c0d6b22
-
SHA512
de55ad3be97f6c7889891fef594fc1f391ed4310de84aab44207aef8b8ffbfb80b5cbb5ac7931086d96dc3ea66bb4376f98012b864c2a3ea572a65981cb46919
-
SSDEEP
24576:JBISSXVQKn84jG6t10ZVMhC5Q0CcGWpci+NoxTZfGQXm:PIR84y6t10DOC5PeR+OQW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bc4653fd5646d83b356f8cef3ca56112exe_JC.exe
Files
-
NEAS.bc4653fd5646d83b356f8cef3ca56112exe_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE