Behavioral task
behavioral1
Sample
NEAS.bdb968e85a6afdf821cfa47067e1acf0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.bdb968e85a6afdf821cfa47067e1acf0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.bdb968e85a6afdf821cfa47067e1acf0_JC.exe
-
Size
644KB
-
MD5
bdb968e85a6afdf821cfa47067e1acf0
-
SHA1
edbb0500c966f8031be92610bca41026a6a56aa2
-
SHA256
7de4830a5e156cef433f1d18833c15509846327e4e2aae54dde6cb4106c2592b
-
SHA512
75196382f242e25c85a18910dd9c2f840bef39a99e5ce2572d5f773e36993fc00b956b5159bbf0f25e0a122ef1c57f4c9cc993b6283d167442602a846bc84756
-
SSDEEP
12288:xEQoS+qhhTJIskG1pIcS/smaXJ2Gi1b62Ngf/gUMr11pi0c2bkEMrEYuk:xnVJNnhXkG+b63ID5ftbxMrxuk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bdb968e85a6afdf821cfa47067e1acf0_JC.exe
Files
-
NEAS.bdb968e85a6afdf821cfa47067e1acf0_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB