Behavioral task
behavioral1
Sample
NEAS.da434d430ba17adea9619053bce6bb2b_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.da434d430ba17adea9619053bce6bb2b_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.da434d430ba17adea9619053bce6bb2b_JC.exe
-
Size
118KB
-
MD5
da434d430ba17adea9619053bce6bb2b
-
SHA1
c9c79e9cccdbd2bccdcfe815644496ad0f105187
-
SHA256
9b568de649fcc4dfdb3648a02738985ced78ac059bec8d9302e05786ede070f0
-
SHA512
5e44c471cdb1446f385829f9af8813a55a6d0a043144223085a4920afd6e81c9d2a81ba166fae64fab4aa8e0af5bf7cd36a4295dc0b6896fc2059c0f3169dd55
-
SSDEEP
768:ae2mxDMm+xKe2mxDMm+xKe2mxDMm+xN77odCRjPlWQZnlvdNhO+5u3k27:txf2xf2xfk72CBBlzhbQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource NEAS.da434d430ba17adea9619053bce6bb2b_JC.exe unpack001/out.upx
Files
-
NEAS.da434d430ba17adea9619053bce6bb2b_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE