Behavioral task
behavioral1
Sample
NEAS.0254b2c894b07c52993f8f3b4b398890_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0254b2c894b07c52993f8f3b4b398890_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0254b2c894b07c52993f8f3b4b398890_JC.exe
-
Size
473KB
-
MD5
0254b2c894b07c52993f8f3b4b398890
-
SHA1
4ba1db3b3644a495e580690149c55315d2e885cd
-
SHA256
0b4e412d003ca7943d7334456e1e3352a30dda7ae3cefe97eb5d6dae5a6f2bc3
-
SHA512
cac92fa1a652c5ef3b68f20ff43931256d02c67495da02ba443a1cad6df2bd9944471203d68427c35c9f1aa7a14b26e7c4aabcd9dd0fe2dbcfc73cea6f7ef04a
-
SSDEEP
6144:vhbZ5hMTNFf8LAurlEzAX7oAwfSZ4sXUzQIlJZl45KZo:ZtXMzqrllX7XwfEIlJZ25K+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0254b2c894b07c52993f8f3b4b398890_JC.exe
Files
-
NEAS.0254b2c894b07c52993f8f3b4b398890_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE