Behavioral task
behavioral1
Sample
NEAS.e305d4d244c77fca656529de607c1329_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.e305d4d244c77fca656529de607c1329_JC.exe
-
Size
1.6MB
-
MD5
e305d4d244c77fca656529de607c1329
-
SHA1
10145843e3dbb5b7103cc4b71d00ba6605f31e94
-
SHA256
164e7e0c617c4204e12a1cbb218317ca629e8dbbc0fe26ffbab263e172763c64
-
SHA512
eed2652ae1f722773a0df2fecfd19512dd4bd22fe777eb1f111eaeb865de89a8065dad98a23acbb8b2f8290aeeffb8d116d1e8ba8c23c940f8b49cd93f975a9f
-
SSDEEP
49152:hpjbazR0vKLXZQ/OgKCYq+ocU7DM4ikf3gRe3ewtnwoi:7atuKLXZQ/ODCYq+ocU7DM4ikf3gRe3c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e305d4d244c77fca656529de607c1329_JC.exe
Files
-
NEAS.e305d4d244c77fca656529de607c1329_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ