Behavioral task
behavioral1
Sample
NEAS.13cfcc086df63a1571a8f9e721ca95c0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.13cfcc086df63a1571a8f9e721ca95c0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.13cfcc086df63a1571a8f9e721ca95c0_JC.exe
-
Size
188KB
-
MD5
13cfcc086df63a1571a8f9e721ca95c0
-
SHA1
cec8f288ca7bd2ec3ea3446f5a60b20513b8481d
-
SHA256
a7333a0ee85aa5b401d84ca1e854a2adfe9825d05522ba688d1e921695cf6f22
-
SHA512
745298f0e3950120810ed9fa5626b5260344361eaddecd09e577f0d01411f8fd02d82bef08d1bd167515072dea12e454465aff0f1e9d5717115eadd9d7286760
-
SSDEEP
3072:lY/5F/E7tEf0D+p+tYlpJH7iXQNgggHlxDZiYLK5WpGrO6outN:lYhF4cO+wWJH7igNgjdFKsYr9oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.13cfcc086df63a1571a8f9e721ca95c0_JC.exe
Files
-
NEAS.13cfcc086df63a1571a8f9e721ca95c0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE