Behavioral task
behavioral1
Sample
NEAS.123748e3e631ba84d5ae41afc3fdb350_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.123748e3e631ba84d5ae41afc3fdb350_JC.exe
-
Size
396KB
-
MD5
123748e3e631ba84d5ae41afc3fdb350
-
SHA1
db16f64b1848df00690f75a0ac2be4edd88234ef
-
SHA256
39c713f7ca07d7df241149523d104b45eadb983c129cd2ae76a95f033be3b159
-
SHA512
d4254c29939ab86d7c90c97c878a6589a4b24a17d0f52547730ac1bef4f987abf7a28ec1a23c1c8bccd43097856bcd22edb1bcef740853d4bcb292ebb4168884
-
SSDEEP
12288:d4wFHoSgWj16thri4gfkDVmuXWOPWHxxcL69tuke:jh6thrLg8BmuXWOPWHxxcL6b2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.123748e3e631ba84d5ae41afc3fdb350_JC.exe
Files
-
NEAS.123748e3e631ba84d5ae41afc3fdb350_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE