NEAS[.]22483277ec1ac935e7c3be070717ab30_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.22483277ec1ac935e7c3be070717ab30_JC.exe
Size

86KB
MD5

22483277ec1ac935e7c3be070717ab30
SHA1

5ba63fb13a9898372de985e3f18b9cda7386ff47
SHA256

66c0a92e48c9ba0c9303b25be7a4e4e30357768bba73ef435c14be26db1cb823
SHA512

8176cfeeeb39b3cd06370491ab4fa14b768916f303033ebdcb5fa1f08d8d8c800fe32a20f3c72237c72fde0bfad0e9f7df8d3cbac2d888c026b6e9e642509de6
SSDEEP

1536:0rRVCaKgzbLc54hukfgvYnouy8EV1Ayj4m/QWR/RcDw:0ljbLl/gvQout41Tj4mYWR/RcU

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.22483277ec1ac935e7c3be070717ab30_JC.exe

Files

NEAS.22483277ec1ac935e7c3be070717ab30_JC.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.jxmnr
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lpkez
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.g
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.i
Size: 512B - Virtual size: 4KB