Behavioral task
behavioral1
Sample
NEAS.0f7387974123bb5f08ba9dc4aaffb950_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0f7387974123bb5f08ba9dc4aaffb950_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0f7387974123bb5f08ba9dc4aaffb950_JC.exe
-
Size
221KB
-
MD5
0f7387974123bb5f08ba9dc4aaffb950
-
SHA1
3f5f6c2e8c137639b1d906bc7ffbfc65d602f162
-
SHA256
60c1606c9737f9e7ee35e1c1d63353ecf94a300344241d6a1f39b46eaef2235a
-
SHA512
0c9641787e7dc0e23e5b932ea59554eaf29adf5da49b7259d59bb7b5eef9d7a2e7ac230ad40179a20266d73a85df165a65dfc539adcbaa3a557e5411b623e0b2
-
SSDEEP
6144:7jluQoSWIo5R4nM/40yJNVRsGp6qAMLpVGP+wWTLxe8qYjCkk:7EQoSaqhpnAMqXWQZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0f7387974123bb5f08ba9dc4aaffb950_JC.exe
Files
-
NEAS.0f7387974123bb5f08ba9dc4aaffb950_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gduz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbe Size: 512B - Virtual size: 4KB