Behavioral task
behavioral1
Sample
NEAS.92a4e08f8a1371ba0800fbc00ba8d220_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.92a4e08f8a1371ba0800fbc00ba8d220_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.92a4e08f8a1371ba0800fbc00ba8d220_JC.exe
-
Size
1.9MB
-
MD5
92a4e08f8a1371ba0800fbc00ba8d220
-
SHA1
c92b0fa4661bb6046aa438caf758b7722d8d9353
-
SHA256
3dda145d296b2e097eca54c1e14d272ff63d56a939af3273d0eab6d6a111476b
-
SHA512
42ed4329dd9e9d9cb25206105ca2e94a5d0335bbf98af58e4528df9239ad61bfbd7aed9554c16e7f629ab222fa9f7f295d89087802b3d3e03a4d1ec45dd40812
-
SSDEEP
49152:/3+buWASa6MTvVcPc3g40subA+tWa5J7bIN+Zdq4dPib6kJu5NI:/36hA3T0igFTZHhc4p+6kJuDI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.92a4e08f8a1371ba0800fbc00ba8d220_JC.exe
Files
-
NEAS.92a4e08f8a1371ba0800fbc00ba8d220_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE