Behavioral task
behavioral1
Sample
NEAS.658ea9e935bd42267bd7f248f67545a0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.658ea9e935bd42267bd7f248f67545a0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.658ea9e935bd42267bd7f248f67545a0_JC.exe
-
Size
507KB
-
MD5
658ea9e935bd42267bd7f248f67545a0
-
SHA1
a1931f763dde3185847038aa7cd139f92c1a93bc
-
SHA256
c2a57defcee8ebc1acf34e694541d17e36cf202e198e3ea8be55a509944c66a6
-
SHA512
e1139ce74869253d5d373eb51d3cb68e495447a018a373e1c05a9a25f7d3228e70be7b0cfbc3155457083bae7c0b6daaf91e5c8a3046d8039647db56340daf9b
-
SSDEEP
12288:CEQoSs/jjABefTZrhSDiKhPtTU9f+rRpCFbv:CKjZbXMlSf+VpCx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.658ea9e935bd42267bd7f248f67545a0_JC.exe
Files
-
NEAS.658ea9e935bd42267bd7f248f67545a0_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE