Behavioral task
behavioral1
Sample
NEAS.252e1c274e6951a5e32234833dfe1970_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.252e1c274e6951a5e32234833dfe1970_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.252e1c274e6951a5e32234833dfe1970_JC.exe
-
Size
202KB
-
MD5
252e1c274e6951a5e32234833dfe1970
-
SHA1
1cb3da89bc32b81580e885ab3ac9b16ba95713e7
-
SHA256
ff9f732a2db46205c4e00d9cbf52b7b98658757280c622e04b05cca9fd93bbc2
-
SHA512
ca96488da48bfcd5d1ea14f8ac9bef9b7faee2f60f9fb834d09673807b0459da38a391e60de367d09b607ed3a2b6f9c9913532c40d8c212043bc98eaea25e664
-
SSDEEP
3072:WTwty9a71RN1XQ+L/+mlf4UGVfGK8Q+b3mt0M8SSUHPTeyyko+8oJohiRh2:jty9a73JqCLqlr+bPMSUHPtX8oJe+h2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource NEAS.252e1c274e6951a5e32234833dfe1970_JC.exe unpack001/out.upx
Files
-
NEAS.252e1c274e6951a5e32234833dfe1970_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ