Behavioral task
behavioral1
Sample
NEAS.092c9e8a360c0ac33f77035457286ca0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.092c9e8a360c0ac33f77035457286ca0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.092c9e8a360c0ac33f77035457286ca0_JC.exe
-
Size
2.0MB
-
MD5
092c9e8a360c0ac33f77035457286ca0
-
SHA1
e05420672da1293880228976ed4d1410c245b58d
-
SHA256
e358042303e94e94da443ab3fa114831af7482fe84950c3b3ce52cdc942a99f9
-
SHA512
3d89ec65c19cfb711807a9a62811ac986c7bce690797665c826d79f71009c019c2892eaf3a9bc98ac95e93cb17105265b1f6fc139b7e0a5a180c888275a4a4db
-
SSDEEP
49152:ADmk6EWu9SWXnL2icSy0mjw/xDNCr3DJq5gNRNd+zQHHtOnB:T5WpU0WSXCz1EgjwQntOnB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.092c9e8a360c0ac33f77035457286ca0_JC.exe
Files
-
NEAS.092c9e8a360c0ac33f77035457286ca0_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE