Behavioral task
behavioral1
Sample
NEAS.0e0d7afb07f1ceaea030579d150b9f00_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.0e0d7afb07f1ceaea030579d150b9f00_JC.exe
-
Size
104KB
-
MD5
0e0d7afb07f1ceaea030579d150b9f00
-
SHA1
0475f16ffa281e4c18ac4fbeabb7574dd116594a
-
SHA256
1499ac2feff7accee177c90b2e640fa41c2dd454cf414d0dca97706032fb009b
-
SHA512
843954a5014c7b703b91647d1ad84ad04532d248b129d07828967122dc862d30ce1c92d62b4aa9945c32f11e7e0b431b12b6f3999b813fe0ace97f98713bfd24
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYKkeu3gYNyANNF+dyMrf:kcm4FmowdHoSprW3NNkUMr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0e0d7afb07f1ceaea030579d150b9f00_JC.exe
Files
-
NEAS.0e0d7afb07f1ceaea030579d150b9f00_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE