Behavioral task
behavioral1
Sample
NEAS.5a12a19b41e03c74c5ac5306e3bd3db0_JC.exe
Resource
win7-20231023-en
General
-
Target
NEAS.5a12a19b41e03c74c5ac5306e3bd3db0_JC.exe
-
Size
93KB
-
MD5
5a12a19b41e03c74c5ac5306e3bd3db0
-
SHA1
b78e71c33ace0619e068bdfdd8de5524f4927b7c
-
SHA256
fd59bddb10e64fced2da954ca0adb939ce976b6e93326be00fc34d0483b05dba
-
SHA512
05b4bc3d0eb63c758dcf38955decbce3f2f9d8db970342e3ee21ef67d72c04151c6ee6e9621ffd3cf55623aeb08930897d8c295de1ae1100aa4226a43604b860
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8yaVskCzYBbKd+Xs6YQIYOkO0pDdIxQ+89:9hOmTsF93UYfwC6GIoutyaVszyKd+Xqu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5a12a19b41e03c74c5ac5306e3bd3db0_JC.exe
Files
-
NEAS.5a12a19b41e03c74c5ac5306e3bd3db0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE