Behavioral task
behavioral1
Sample
NEAS.7201233559e14e05d7fbd8e5376f9820_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.7201233559e14e05d7fbd8e5376f9820_JC.exe
-
Size
118KB
-
MD5
7201233559e14e05d7fbd8e5376f9820
-
SHA1
86db8b5256e9016aca41c2127ffa079e638be28d
-
SHA256
3b540288c9c91bbcb1f2ae91a791cde0f5f8693ec6a816ec44cfdca2b210d432
-
SHA512
f215219a2130d0c1f738da286d5ad238ce9b06855d4652cdf85a963d8fbb52cb7f0ef1c05f5510f3506495d03d5e94ca222165fba97769cb582df20327399f30
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLQS7ByFqpNTWtF:9cm4FmowdHoSdSyEpFWb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7201233559e14e05d7fbd8e5376f9820_JC.exe
Files
-
NEAS.7201233559e14e05d7fbd8e5376f9820_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE