Behavioral task
behavioral1
Sample
NEAS.b547464e10a352faa6ec0f2bc20b5130_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b547464e10a352faa6ec0f2bc20b5130_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b547464e10a352faa6ec0f2bc20b5130_JC.exe
-
Size
29KB
-
MD5
b547464e10a352faa6ec0f2bc20b5130
-
SHA1
e9126cac4c61764095ea09cdcf5f9c5ee31be265
-
SHA256
3d3a1fbe0a40da162b93346dc2e812f0a53e298df9b127c8be58b52099b813dd
-
SHA512
860704aafd28c0d79127ea91a4ee4338730f4033b07438391b11350f05e0cf8b84e8b93fcf0f5e3aa8b0c451afcd71ce2b9a307bc68c570e1ab424ab1783bcb5
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/0:AEwVs+0jNDY1qi/qM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b547464e10a352faa6ec0f2bc20b5130_JC.exe
Files
-
NEAS.b547464e10a352faa6ec0f2bc20b5130_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE