Behavioral task
behavioral1
Sample
NEAS.e58a669bb37501dcd1e5cfe4c3122850_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.e58a669bb37501dcd1e5cfe4c3122850_JC.exe
-
Size
99KB
-
MD5
e58a669bb37501dcd1e5cfe4c3122850
-
SHA1
1ce2ca53f77a0d6f3c8edb8fc2fe6d35d064fb7b
-
SHA256
38fbc74aecad80b1ed3ec7d8af3fa05655fcb6ff2a0a54bb0146039db7d108de
-
SHA512
94c0c6aae8c7f0808a3bb85193629aec7047d24b948ab520fe725afb5fc227452c9700793bd91b69557ff6f6cc7b050b5f06dd504ec681da8886f9e19f9a7563
-
SSDEEP
3072:DhOmTsF93UYfwC6GIoutpcJQ5OFhmgSbbc:Dcm4FmowdHoSpijm5c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e58a669bb37501dcd1e5cfe4c3122850_JC.exe
Files
-
NEAS.e58a669bb37501dcd1e5cfe4c3122850_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbs Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE