Behavioral task
behavioral1
Sample
NEAS.4b30f4b4d250a9106efb9b02b425fe20_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.4b30f4b4d250a9106efb9b02b425fe20_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.4b30f4b4d250a9106efb9b02b425fe20_JC.exe
-
Size
40KB
-
MD5
4b30f4b4d250a9106efb9b02b425fe20
-
SHA1
4b6059095ecdb709b0573e8d54e37928392e4cc2
-
SHA256
92ee15a3fecd2d21dbb9bf5ab994ba3b140dfe3f1ead9d31db4bc35c6c0e458a
-
SHA512
857a9563c547fc9670665faf22bbb2a6e459a70d212f72a48ecd1b0d24fc9f1e7b2157aeb9fb9b682c90f1a009aa837350b0b0a597019b5dd1e7e145c0b6e589
-
SSDEEP
768:gCkSsf4ssqtlrCE+51fiL8cNsiX8liiEKpbjtv8H1:gCkV0KlCpfqNse8li128H1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource NEAS.4b30f4b4d250a9106efb9b02b425fe20_JC.exe unpack001/out.upx
Files
-
NEAS.4b30f4b4d250a9106efb9b02b425fe20_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ