Behavioral task
behavioral1
Sample
NEAS.7a6b7600cd7f2e0cc4af5add01e6d706_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.7a6b7600cd7f2e0cc4af5add01e6d706_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.7a6b7600cd7f2e0cc4af5add01e6d706_JC.exe
-
Size
238KB
-
MD5
7a6b7600cd7f2e0cc4af5add01e6d706
-
SHA1
47a4713db6aa7476d40751c9cac5bebd863db052
-
SHA256
2f53faf3cdf2d96e013a1a3000f2fa3a5a803cfef4d6c42e8ddbe5c6af76fd39
-
SHA512
47455af7221eacf2db6def662c99b5fe68f4d39ed0f4f7170ec125c99b15fe93e4b242b1aec83906cc28a9a485dd765498ef81940a82c7d2fef349473e8edf30
-
SSDEEP
6144:Wur3y6iJv8XQ/g4cDxI5ba2mA9FWra0GeL:ftovP/LwI5ba27MrlGe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7a6b7600cd7f2e0cc4af5add01e6d706_JC.exe
Files
-
NEAS.7a6b7600cd7f2e0cc4af5add01e6d706_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE