Behavioral task
behavioral1
Sample
NEAS.0ed1ee93a9cefa7b986106b76a237a00_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0ed1ee93a9cefa7b986106b76a237a00_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.0ed1ee93a9cefa7b986106b76a237a00_JC.exe
-
Size
886KB
-
MD5
0ed1ee93a9cefa7b986106b76a237a00
-
SHA1
b6530e0eed207f73616cd199d57b3a1695e5316f
-
SHA256
9c4b1077cb199740bf27ea97b488e3a4abb947aaa9d52305517e420afe562ba6
-
SHA512
30879222e339c0cd2c94c8d57c92f55d8716fab7913b7d7e136a2b264c7a3bc6fba1b79058cef5f23167df1d5313ba67072dd32abb119367fe8999ba2e70aaf4
-
SSDEEP
12288:bPKL8qKPJF6jIO5Wu0wtEnzF8Mqtx9igZx0wDLGIVEDLOoFq55rffrEu77fU1i2s:bSLt5lvxIs0oSjDLxS7T577fEi/7P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0ed1ee93a9cefa7b986106b76a237a00_JC.exe
Files
-
NEAS.0ed1ee93a9cefa7b986106b76a237a00_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB