Behavioral task
behavioral1
Sample
NEAS.b04989e4c840829fe853eb1fe2b17500_JC.exe
Resource
win7-20231023-en
General
-
Target
NEAS.b04989e4c840829fe853eb1fe2b17500_JC.exe
-
Size
63KB
-
MD5
b04989e4c840829fe853eb1fe2b17500
-
SHA1
6758eb3bcd75cc3b9bcebbe50678b9dad234b9c4
-
SHA256
128b7a9b67631856eef9da2174b9e8a46cc6bc8147e2c43f3ec59b1580ea64ef
-
SHA512
3eb02739f2005a192d599bb4cc58aee2557eac92aa09ffd30eee4ae0d331c2295cf2e0fd45d6db7afd07db355c2d51c8b621948fc48202c48e68f6b5e62f6967
-
SSDEEP
1536:/vQBeOGtrYS3srx93UBWfwC6Ggnouy8jb5D1Xq:/hOmTsF93UYfwC6GIoutvq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b04989e4c840829fe853eb1fe2b17500_JC.exe
Files
-
NEAS.b04989e4c840829fe853eb1fe2b17500_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vryeypb Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE