Behavioral task
behavioral1
Sample
NEAS.00df7ae3b61ea248de2c9ba991b9b930_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.00df7ae3b61ea248de2c9ba991b9b930_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.00df7ae3b61ea248de2c9ba991b9b930_JC.exe
-
Size
105KB
-
MD5
00df7ae3b61ea248de2c9ba991b9b930
-
SHA1
8ca47effa9105a77fe69015c36e271ec45d15157
-
SHA256
e4bc57d9276d4f114dbb200e56a5bb7c8d55c26e113103281e41766f419450f6
-
SHA512
f74224064c9f0f69fd28524ce6bfed5ec588b97dcf5ba142b93ffaf5ab01d860a98df88ace3e16a8a1f6ef8191b4a8fd6205b970aecc3deb1567a61860631851
-
SSDEEP
3072:cGjbLl/gvQoutY1Tj4mYWR/R4nkPR/1aVuyJNodFq4qMhY62:xjluQoSqIo5R4nM/40yJNXMhYX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.00df7ae3b61ea248de2c9ba991b9b930_JC.exe
Files
-
NEAS.00df7ae3b61ea248de2c9ba991b9b930_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB