Behavioral task
behavioral1
Sample
NEAS.00a349ed66c8f3511024df7369289530_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.00a349ed66c8f3511024df7369289530_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.00a349ed66c8f3511024df7369289530_JC.exe
-
Size
278KB
-
MD5
00a349ed66c8f3511024df7369289530
-
SHA1
9ae27a2af07aef33913ba127ba35509dedfb1afb
-
SHA256
304ec55f8c18d9a6efde55fddc27064e7c45f45258642d884a7835f06c284ac5
-
SHA512
140bf983bfe4ebc0c7de505d1b3a2d27f737d81e55e16112ec50bd863518d2ed393791da8e722e223a017f128c11dd49229910e04fc5b3b94944f3dde3132a1e
-
SSDEEP
6144:03oTJQcLHBUhOKhzW6iJsoePbWKkkjfysl66SbPxdL7UhyAHiMWarJeq4GwYt5av:03qVLHBUhOKhzW6iJhePbWKkkjfysl6r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.00a349ed66c8f3511024df7369289530_JC.exe
Files
-
NEAS.00a349ed66c8f3511024df7369289530_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE