Behavioral task
behavioral1
Sample
NEAS.0f4f7ce3d759c7e9bf8369e849a34d90_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0f4f7ce3d759c7e9bf8369e849a34d90_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0f4f7ce3d759c7e9bf8369e849a34d90_JC.exe
-
Size
429KB
-
MD5
0f4f7ce3d759c7e9bf8369e849a34d90
-
SHA1
95b866ea030a27c328eef63051600edaf9153d78
-
SHA256
959949adf1a0fbfac42de0d71ff4c9c338b3a0005bcada9ebaeed64ae4bb1315
-
SHA512
19315d15a68da3eb50a361d86c2aae6ce42d046e94bd0226203ac31963c11836b2c109e37d884465c0b39ce573019b7b4942c23bab99f84b4dafa2e8058a2304
-
SSDEEP
6144:bPDLCL4Io5R4nM/4JBrgcQRu/d741/0pq+rabvWpFyvvjMDw2xVJjsMT:bPKL8qh2cQkF741SAvgynjkwSPjT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0f4f7ce3d759c7e9bf8369e849a34d90_JC.exe
Files
-
NEAS.0f4f7ce3d759c7e9bf8369e849a34d90_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB