Behavioral task
behavioral1
Sample
NEAS.7a6075819eb3107c5005de18d7733f00_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.7a6075819eb3107c5005de18d7733f00_JC.exe
-
Size
338KB
-
MD5
7a6075819eb3107c5005de18d7733f00
-
SHA1
8ab1e2eb6620d994f0f7daafe4e1896a802a265e
-
SHA256
62e3d549cc4e902308195bbeca49585a6a899fcee8df6766eaacc37128ec9f04
-
SHA512
98c0703037f2f5ece815b4e44e8a38c3d40f641f7c39ea9885ff6de49dac81bc7a97ffca4c8bcf7d234ee18ca2a1f586e37bd4c2d357bf6d7d72ac113f73f368
-
SSDEEP
3072:BmVwRKCrIYlW9dLKEl4MC0iFixWS1WC2P9/KvI:BmVn6O4Ep3s7BZD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7a6075819eb3107c5005de18d7733f00_JC.exe
Files
-
NEAS.7a6075819eb3107c5005de18d7733f00_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE