Behavioral task
behavioral1
Sample
NEAS.428ae3191585295c3f86b3e24967fcc0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.428ae3191585295c3f86b3e24967fcc0_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.428ae3191585295c3f86b3e24967fcc0_JC.exe
-
Size
741KB
-
MD5
428ae3191585295c3f86b3e24967fcc0
-
SHA1
3ef61dec2e036afbfbb99468a0490cbda348bcd5
-
SHA256
9dfad1af0f5c5c875df9eccb294ca2c2af9e73d08c88e8496111f5d2785f8600
-
SHA512
e24a4db0484de1d607dedceab51d67dbd1058beaa3d3c576effbb4b93729aaa0440da942cbc57dac63e6c8a505c08b8d3f1782e2022d9fad90287aa8c72e7542
-
SSDEEP
12288:yXpqhwlyD3ThRHgt4/upprhHXgZ7iZV01uoy5p3fqQgQFdYa7OX0wAArdHIUgMZr:yUEaRHga/upX3S2/Kq5lfngQzhtwA4g8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.428ae3191585295c3f86b3e24967fcc0_JC.exe
Files
-
NEAS.428ae3191585295c3f86b3e24967fcc0_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE