Behavioral task
behavioral1
Sample
NEAS.250f1247065ff73654dcd31e50faff19_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.250f1247065ff73654dcd31e50faff19_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.250f1247065ff73654dcd31e50faff19_JC.exe
-
Size
1.5MB
-
MD5
250f1247065ff73654dcd31e50faff19
-
SHA1
598b63f4757940e4a8475d4e6baf6f5d81991156
-
SHA256
da24f95b75ec44e4bedc2584556deb3e65747eb414ba83866e68b71956c99550
-
SHA512
b2bdfb38f2cbe272d87810c254597c410610a7a027e5afedba4fbcdee94649b3975e8165c8fa4ecf4e52fc905dba112f8780a22c4a4394b4cfc5c2e1cc63fa9c
-
SSDEEP
24576:NSLolM4bIii+FJVKWniR5/achafNwVbxZ4QUWxJCTD8wwKatiNjCLrrNVU1:NHE8Jbip8yZ4oJCn5wKazra
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.250f1247065ff73654dcd31e50faff19_JC.exe
Files
-
NEAS.250f1247065ff73654dcd31e50faff19_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB