Behavioral task
behavioral1
Sample
NEAS.033fb4fee3a9d03b5bcc78473c91b730_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.033fb4fee3a9d03b5bcc78473c91b730_JC.exe
-
Size
139KB
-
MD5
033fb4fee3a9d03b5bcc78473c91b730
-
SHA1
756af466a83a29f4d7e722b71e59d83b8b4a66fe
-
SHA256
a3398cfabb4b50e68e4ae8aaa99edf60625cfbad5b5847834e0dcbe8d1cffa6e
-
SHA512
66b386aa3f19ececb1684e0a5e771306e9afb2a2a52a985018d48af9ade5da404098c6c8ce0a01cba5b5d1483c7870cdd0bbeb4568e225c5ad790e17ca5899aa
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBuItR8pd9:9cm4FmowdHoS4Bftapd9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.033fb4fee3a9d03b5bcc78473c91b730_JC.exe
Files
-
NEAS.033fb4fee3a9d03b5bcc78473c91b730_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE