Behavioral task
behavioral1
Sample
NEAS.71901486a53b803149ec5939a5c5b9da_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.71901486a53b803149ec5939a5c5b9da_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.71901486a53b803149ec5939a5c5b9da_JC.exe
-
Size
1.6MB
-
MD5
71901486a53b803149ec5939a5c5b9da
-
SHA1
2846d4d211ca35fba9d175a391e6fbd8be6586d2
-
SHA256
7470dbad35515fa4dbfb9364337df72f4cf14ec322fd607041b2baf8db6fa76f
-
SHA512
ffd998360583145a36c20592b4f9b9667aa4d7342919505d91da0780aa94ccb61cd54b793910643059128c8f3f26e31d71672fd841d4844b2c88901579de6423
-
SSDEEP
24576:0XK1mLLebZ4k+vMCw4BVAV7PUXEcTXEQiKtdmVIiURuYWlZNgj+yXVmqIfOvkpnQ:D1me+JMCzJN4ItGIjwzNQ+QmJWin335i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.71901486a53b803149ec5939a5c5b9da_JC.exe
Files
-
NEAS.71901486a53b803149ec5939a5c5b9da_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ