Behavioral task
behavioral1
Sample
NEAS.ddc0c0b801bfc40bcbbd86030240a362_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.ddc0c0b801bfc40bcbbd86030240a362_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.ddc0c0b801bfc40bcbbd86030240a362_JC.exe
-
Size
1.9MB
-
MD5
ddc0c0b801bfc40bcbbd86030240a362
-
SHA1
0f6b48b244fee4d78c9d46d5f1f4bc486ed6f10a
-
SHA256
d64975e461e0924f5262594b69a6f3e7e7fa0abdbe4a0c07b315e7b9baf2a5a0
-
SHA512
750883abbc81851180c4ef556b0a735428d69187d37b6443e1712e211713f5c1f9ede01ee2cb263c0d077ae0d7e6cce4251c04990e3f11e07c15e58c6ec5d10e
-
SSDEEP
49152:XG9LuWAUqGYkj7Cg1Auxiajtgu7i0g0gxvp2I3Gk+lAG:XGNhvCg1AER1gxv8URE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ddc0c0b801bfc40bcbbd86030240a362_JC.exe
Files
-
NEAS.ddc0c0b801bfc40bcbbd86030240a362_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB