Behavioral task
behavioral1
Sample
NEAS.54b313f6d3ff94cffda52e77225d5ac5_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.54b313f6d3ff94cffda52e77225d5ac5_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.54b313f6d3ff94cffda52e77225d5ac5_JC.exe
-
Size
1.7MB
-
MD5
54b313f6d3ff94cffda52e77225d5ac5
-
SHA1
0f6c20c28f86046afc171df8bd13e74e39ef31d2
-
SHA256
8c47fbc997fa6b683b3d4bb6e330a17bdbc19486983df7b9ba47e0f96eaeb31f
-
SHA512
807c54eef42f3fe055fcd240566a2dae5fbc43cbb7f58e69db75bf3b90f3d9fd1b05c8c90ee5f8b176d9304b98d283307e8687cbef4d00a0df7eaf310af17b0c
-
SSDEEP
24576:t2XI67byaZFINqX/N0Kw6Qio88s8L4kOI796s8IkghtVS9Q4xRgurDGBG55jFLzv:Qtyap/OPgPHI79rCI6WsGwACxADsMU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.54b313f6d3ff94cffda52e77225d5ac5_JC.exe
Files
-
NEAS.54b313f6d3ff94cffda52e77225d5ac5_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE