Behavioral task
behavioral1
Sample
NEAS.0e0cd104cdaadaf29fefa229b8359560_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.0e0cd104cdaadaf29fefa229b8359560_JC.exe
-
Size
65KB
-
MD5
0e0cd104cdaadaf29fefa229b8359560
-
SHA1
cd35ab1a5a302eb2ed285d856c132fbd08c8b4e2
-
SHA256
9c9d03245c5289c34f2484d5b2fb4bb5cf9b3cc1ae137088c8f398086faefc27
-
SHA512
aa1432e66fa1e9923746aec347e0717dd5d24126b86feae5cc2dbe70462d1370f8ca28d0b0c2f47d384b853fcae9e57c2857a1a3f922f2fafe3b0266ad671ad7
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8yaVskCzY63DrgC:9hOmTsF93UYfwC6GIoutyaVszvDd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0e0cd104cdaadaf29fefa229b8359560_JC.exe
Files
-
NEAS.0e0cd104cdaadaf29fefa229b8359560_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE