Behavioral task
behavioral1
Sample
NEAS.03a19158296ab395c01a0d2e393e4075_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.03a19158296ab395c01a0d2e393e4075_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.03a19158296ab395c01a0d2e393e4075_JC.exe
-
Size
86KB
-
MD5
03a19158296ab395c01a0d2e393e4075
-
SHA1
a6505b2575f5fae668142f50129c22d110ba4431
-
SHA256
072564820cde161e96ca632c5ef6070bb991a8037161bd02774f78e89c173e09
-
SHA512
b1d1102ccb0ad2e660bb339d108a604e4fdcb72da284c083535cf88ec5183385b04b02bc380bb3dda51d606d56204a15a2a409a610bd1f07c8c9f0171354d7b7
-
SSDEEP
1536:wFJz/vArEqF8F1DXE2HCIkjDL6jlTSV1Ayj4m/QWR/Rlq88vlnRqPR/1aViDRkng:wvs4dDXEGCLElS1Tj4mYWR/R4nkPR/1/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.03a19158296ab395c01a0d2e393e4075_JC.exe
Files
-
NEAS.03a19158296ab395c01a0d2e393e4075_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB