Behavioral task
behavioral1
Sample
NEAS.61418413389e6d8a1e211e0439d9e610_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.61418413389e6d8a1e211e0439d9e610_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.61418413389e6d8a1e211e0439d9e610_JC.exe
-
Size
3.9MB
-
MD5
61418413389e6d8a1e211e0439d9e610
-
SHA1
67014cd768a296d0905744041a5555a4a4954be4
-
SHA256
c1105061553868eb708e61236cdc5798c948e03f10b619004d9387e041ccd54e
-
SHA512
f38b828f54a560aadec70f4dfb9eb9a6ee66834a63917e2b4d55f05e3868b53f9b3c22fabc3c94c68abf22e9c788061a1ffafd56e8772933c185ff3e95aa013e
-
SSDEEP
98304:vLWZSniVByw6gEXGzEY7ssGw6gEXGzEY7JRwtBadLhRQyzw6gEXGzEY7ssGw6gEQ:MXKgGQjEgGQjHIegGQjEgGQj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.61418413389e6d8a1e211e0439d9e610_JC.exe
Files
-
NEAS.61418413389e6d8a1e211e0439d9e610_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE