Behavioral task
behavioral1
Sample
NEAS.b70ad84dd1afd12b23c861a4dce7c635_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b70ad84dd1afd12b23c861a4dce7c635_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b70ad84dd1afd12b23c861a4dce7c635_JC.exe
-
Size
482KB
-
MD5
b70ad84dd1afd12b23c861a4dce7c635
-
SHA1
0a66cc0155f1f9f3beb42e1a31f8b40f11bedb0f
-
SHA256
e2180d2cab931f717119389491b772d23a5898b57ed02761cd993ce8fb12efbf
-
SHA512
ca6cfca8c9b793b3eb8b1449fc11855a4c615c58359824bf65534363c870d2aabce3ee1b8960f84788bf91833428b6fd60b797da5db5f7907c32f6b0e44d5302
-
SSDEEP
6144:vhbZ5hMTNFf8LAurlEzAX7oAwfSZ4sXUzQIlJZllgSR:ZtXMzqrllX7XwfEIlJZD7R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b70ad84dd1afd12b23c861a4dce7c635_JC.exe
Files
-
NEAS.b70ad84dd1afd12b23c861a4dce7c635_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE