Behavioral task
behavioral1
Sample
NEAS.e87ebf3523cf3d3492810af2da737cc0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e87ebf3523cf3d3492810af2da737cc0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e87ebf3523cf3d3492810af2da737cc0_JC.exe
-
Size
71KB
-
MD5
e87ebf3523cf3d3492810af2da737cc0
-
SHA1
00663908039fc0ff8dcff4ffc8c14019aa359917
-
SHA256
1d20ecf1fa7cd9426326cecbf82e5f1eeeb86c229dc41cc4bd3d81160a9b389d
-
SHA512
92caf54b3405f1e3976f0d5847c07b9c2eb4cf0aaf277f02915a05bc5e51fcdaa39816eabc229ae532ddb5088373d3412ccdf9250050b616939f5bb14e590958
-
SSDEEP
384:ar1xq3UZU9HYExDMQJM1wYgjgF+7CS6rqH9Rwu9xzyURUm1bp:a3ZU9H9DMQQwYa++7CS62wuRUmB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e87ebf3523cf3d3492810af2da737cc0_JC.exe
Files
-
NEAS.e87ebf3523cf3d3492810af2da737cc0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE