Behavioral task
behavioral1
Sample
NEAS.d51ff3aba194ad49d27cc73385917fb2_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d51ff3aba194ad49d27cc73385917fb2_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d51ff3aba194ad49d27cc73385917fb2_JC.exe
-
Size
379KB
-
MD5
d51ff3aba194ad49d27cc73385917fb2
-
SHA1
a7c33dbdc67bc84dcb122f5284ff5066d1eee874
-
SHA256
b76d02d75bce0a2daad048d86476286eefb47ea550aba5051341b1f761275c09
-
SHA512
c922ca8f619cd9d607ef5b8381a53c96a2e9f59fdc02e0eb3ce6ddc3c3c8b1ea5e10eecb7a2e62559da848c1ebcbbc8a7e39a4053be25358fe507f373e26da68
-
SSDEEP
6144:jh8Z5hMWNFM8LAurlEzAX7oAwfSZ4sXUzQIcS:VEXM5qrllX7XwfEIT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d51ff3aba194ad49d27cc73385917fb2_JC.exe
Files
-
NEAS.d51ff3aba194ad49d27cc73385917fb2_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htext Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE