Behavioral task
behavioral1
Sample
NEAS.c3e6ee454541c50fffcb6bed4b64cbdd_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c3e6ee454541c50fffcb6bed4b64cbdd_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c3e6ee454541c50fffcb6bed4b64cbdd_JC.exe
-
Size
306KB
-
MD5
c3e6ee454541c50fffcb6bed4b64cbdd
-
SHA1
06ad206639aa98c51d2743909861f8c130821e3f
-
SHA256
a4be51ccba19658e9a18d0e39fa127aa336aaeed89f75a88c4a589f3e6994aca
-
SHA512
af1ec92e264c12e71e3d8cc4e3f184e6ba90d98c1172adfee4152e8bdaa4cc460714947400242bbdaef3d559f06e44b99ba7a9aa0a68c775925eb2904f9eddaf
-
SSDEEP
6144:FfNdLF0ocp0dyd+97C6H8nnMHPer11XgUfcgxFomgXHsMjoSO:FFdLF9S0deQJ8n7RkgxFZgXxoSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c3e6ee454541c50fffcb6bed4b64cbdd_JC.exe
Files
-
NEAS.c3e6ee454541c50fffcb6bed4b64cbdd_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 302KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE