Behavioral task
behavioral1
Sample
NEAS.431c2d77ff9b915939247ae5cbc794b0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.431c2d77ff9b915939247ae5cbc794b0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.431c2d77ff9b915939247ae5cbc794b0_JC.exe
-
Size
1.1MB
-
MD5
431c2d77ff9b915939247ae5cbc794b0
-
SHA1
dd1185ccf3d47fb426a15a28aa8172f2bc68d410
-
SHA256
5ea11c6819812099398139aa21bb6e58dff540f1f5c56a844a77605c4f404137
-
SHA512
bda51a510f742e5a1b628e45962ab2fbad1398131226e48a27a8c120dd4a030715d38e97df53b84919f9855f3bd2736e1a49faed18fdeeef68a0b52f870aa83b
-
SSDEEP
24576:bSLRhDEp1TrtSL7z3k27OvE1ARxgAceMfEkg6NRVX1Emdt+fQCL2Ffq3:b6hDEppAHbktrR2fXgwj1Dv+fQJFC3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.431c2d77ff9b915939247ae5cbc794b0_JC.exe
Files
-
NEAS.431c2d77ff9b915939247ae5cbc794b0_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB