Behavioral task
behavioral1
Sample
NEAS.dcd9f4c4c67ae1c10804a3d214c55879_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.dcd9f4c4c67ae1c10804a3d214c55879_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.dcd9f4c4c67ae1c10804a3d214c55879_JC.exe
-
Size
377KB
-
MD5
dcd9f4c4c67ae1c10804a3d214c55879
-
SHA1
2e6ce48a59e8a9243aea5eb80d503839d1fe049f
-
SHA256
4dd15abf4e67f31d87c08bc33b3a6a9189b0899adb82b0740c975d6f442c493b
-
SHA512
71c6c04dcb6237b709e5f0dc08684c657bbe60c64260954bb82bae8a99f271286db7854ed433e326aadbc69fe82e2380bead4d6978282520054c1ffaff87577e
-
SSDEEP
6144:CjluQoSIIo5RJE0zW/N0u3ZtjiPreaP1pfv+CqHEbNs1QmbzIuF8E5AfBqW:CEQoSsKY4Cu3zGeUxzqHEb+QmzIk8EMX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dcd9f4c4c67ae1c10804a3d214c55879_JC.exe
Files
-
NEAS.dcd9f4c4c67ae1c10804a3d214c55879_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE