Behavioral task
behavioral1
Sample
NEAS.26ac2ae1ef3006bbfc4d9d2478526920_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.26ac2ae1ef3006bbfc4d9d2478526920_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.26ac2ae1ef3006bbfc4d9d2478526920_JC.exe
-
Size
45KB
-
MD5
26ac2ae1ef3006bbfc4d9d2478526920
-
SHA1
a8f0c111b6b172a9ae4d19b4f7660bb73dbc4ca6
-
SHA256
39ea8fab465ea4e64ea8995344f5e1a997b0783923eca426f6e9ddba36855cfc
-
SHA512
bdc6dff7d8a514b34f58874ae2c27cef1f40a40c1ffda97d6319e8558f62be554a1a6a473fa73dc16a64d15859a918fb7c9812495d376274ace990484b911a32
-
SSDEEP
384:xp4eMlp2Cz0jpqWnBGJhMYbVBnQwxVfzd4zfVPmpzCA44oSduhp/4oHxZUtO4f5x:rZu2fGnDbVBrxVGWud4PQ9Vd4f54A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.26ac2ae1ef3006bbfc4d9d2478526920_JC.exe
Files
-
NEAS.26ac2ae1ef3006bbfc4d9d2478526920_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE