Behavioral task
behavioral1
Sample
NEAS.NEASe66653c19893a10449060f2b7edf889cexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.NEASe66653c19893a10449060f2b7edf889cexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEASe66653c19893a10449060f2b7edf889cexe_JC.exe
-
Size
140KB
-
MD5
e66653c19893a10449060f2b7edf889c
-
SHA1
025510681025f8a15c7a3a86e438417316ca12ea
-
SHA256
3c116cbc81217173f9ac40115f7b3fefc64b7b8d3025f65c1da0ee36c651cdb2
-
SHA512
577e3818fde606b88a045094120c3696360bb2f799a270b1978b2c1711ae401584220940023d4f8e1fb058f0df9394eabd580d3ebcd00993a4da98fae6c4819d
-
SSDEEP
1536:ZRsjd3GR2Dxy387Lnouy8VTwBJ9tz4Iw0NGfQpi7MBZLAG4RsfUpawBJ9tz4HtKR:ZOgUXoutNwxZVX4/awx9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.NEASe66653c19893a10449060f2b7edf889cexe_JC.exe
Files
-
NEAS.NEASe66653c19893a10449060f2b7edf889cexe_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE