Behavioral task
behavioral1
Sample
NEAS.0234ca2158c8da1fd5c819bb100c6620_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0234ca2158c8da1fd5c819bb100c6620_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0234ca2158c8da1fd5c819bb100c6620_JC.exe
-
Size
231KB
-
MD5
0234ca2158c8da1fd5c819bb100c6620
-
SHA1
b0be4f2bf726e3b46f3537c9a331d3552a70c343
-
SHA256
95e10fa3d6b118d64a124a2b17e5f934baaf37f097bc2cc94c10943a8ac7b0be
-
SHA512
f18563c3eb23fd75b092f34c4f9752b1a7c6556c5d1780c2d4c991a080f6cd1e82a0149578418746f4d8875dacba774fe5e385aca5acf68451fe6e185cd3a0ee
-
SSDEEP
3072:G0PsymB6eYc7D6JzN11sH6MI44BCAiP1HI5QrercoKaM743GQQ0fF:BP+B6eYcyJRq6MIfC/8kJ91u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0234ca2158c8da1fd5c819bb100c6620_JC.exe
Files
-
NEAS.0234ca2158c8da1fd5c819bb100c6620_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE