Behavioral task
behavioral1
Sample
NEAS.7eae2d1906f7381accdb3456172ea030_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.7eae2d1906f7381accdb3456172ea030_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.7eae2d1906f7381accdb3456172ea030_JC.exe
-
Size
1.1MB
-
MD5
7eae2d1906f7381accdb3456172ea030
-
SHA1
e022661d592695a377d5672954c70bd190a92e59
-
SHA256
75c4ff2188a7e733c2a12ec92631264621d6dbecb7acd9fc52c2cf9ddcf36e7d
-
SHA512
8ad59d77e48031910515b47bc9da4976758e4316d6ea041ab2f4ff821b8625cdff9181f0a3902cc6d6030e24d7571f502b24c757a854b3aae0a1c5a1a6c4c284
-
SSDEEP
24576:yUTOzP3sRelueh4m6/PzAEY4qkgGsIeZnSog988ryvYSRl/moM:/azPcRelueEDAEJvgG0nS1e8r4Ycl/fM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7eae2d1906f7381accdb3456172ea030_JC.exe
Files
-
NEAS.7eae2d1906f7381accdb3456172ea030_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE