Behavioral task
behavioral1
Sample
NEAS.4fc60c9d0fd000f1a7d9a9abdffbdac1_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4fc60c9d0fd000f1a7d9a9abdffbdac1_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4fc60c9d0fd000f1a7d9a9abdffbdac1_JC.exe
-
Size
332KB
-
MD5
4fc60c9d0fd000f1a7d9a9abdffbdac1
-
SHA1
9c8488c0b5795291149d29f28fc5e7a7485d2306
-
SHA256
edd792f03837fe4385a439acec5a5e1240dabf92b2cb16be3fd8e05d203dcc88
-
SHA512
8d9fa7565a0293cee78b8107690a2e53b8f9d0dea15e3b01d92f5c2528f48ba48b2d34834e1929de72fadcaba5bab1da6bec190382b8833509d3a7ca19c92549
-
SSDEEP
6144:sPDLCL9Io5R4nM/40y6TzodPLo7CLPCEzfdRcYG6LqSz+YUWjUUFxCZV5TMt:sPKLXqYodP07UKETUYG+F+iUrKt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4fc60c9d0fd000f1a7d9a9abdffbdac1_JC.exe
Files
-
NEAS.4fc60c9d0fd000f1a7d9a9abdffbdac1_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB