Behavioral task
behavioral1
Sample
NEAS.c1fd2644880ff16c00a28e898ab0e05d_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c1fd2644880ff16c00a28e898ab0e05d_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c1fd2644880ff16c00a28e898ab0e05d_JC.exe
-
Size
213KB
-
MD5
c1fd2644880ff16c00a28e898ab0e05d
-
SHA1
70af74fdffb5095641f781cef63a559ff0c75033
-
SHA256
dd7995fc0b64c86c87a6c0c56e6f9505ef7f7c7dd58b2ba9bd84b7b6010704c7
-
SHA512
7fb5d414c514dd0ca817e76bd4e3fc44fea099a78e3aa0bd180cd5471c179c2ce52f2d0bae3e7825a9916629cef0c35f327d6703829da70d03ffd03016ce6ed0
-
SSDEEP
3072:adEUfKj8BYbDiC1ZTK7sxtLUIGcly6aqOn7ACE89zMfo0z3YRmmG82t:aUSiZTK40wbaqE7Al8jk2j2t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c1fd2644880ff16c00a28e898ab0e05d_JC.exe
Files
-
NEAS.c1fd2644880ff16c00a28e898ab0e05d_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE