Behavioral task
behavioral1
Sample
NEAS.68054e80e8a0b0c5be8a4dbc436516d0_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.68054e80e8a0b0c5be8a4dbc436516d0_JC.exe
-
Size
447KB
-
MD5
68054e80e8a0b0c5be8a4dbc436516d0
-
SHA1
486b5204fbcef0a30f3b7a3bb31d8094fde6f10f
-
SHA256
272a4744d9ce5815c21791cbf1a108773c3df81acf8adba5f033bd6308f42181
-
SHA512
12c44e75b0b11a05fe03088562a9a08cdf2ece12a096135e2315001bb80552cc8750ec1e470be0e8ea6a119d192e0e83db9b73d61a69afdf2cbf22cb222c7f0b
-
SSDEEP
768:CpQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEm1:CeT7BVwxfvLFwjR1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.68054e80e8a0b0c5be8a4dbc436516d0_JC.exe
Files
-
NEAS.68054e80e8a0b0c5be8a4dbc436516d0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE