Behavioral task
behavioral1
Sample
NEAS.96d0d0063f840c06b51a05edf79a7900_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.96d0d0063f840c06b51a05edf79a7900_JC.exe
-
Size
109KB
-
MD5
96d0d0063f840c06b51a05edf79a7900
-
SHA1
3d2df7d40128448f26b3fa7d9d0493eafd6377fd
-
SHA256
dea49a6149684785096f36050e4ed1b4bf1162ccf1ac1b5e288f4090c3dc3798
-
SHA512
c9f95ca4cada6f5e6b7fc0326f2959b76599acd7779e1bd56a9aa990b00d58f01aa60a4f3e1705de570e10d14d6b35357207a1edb4a96ce1d1ab87955317ba64
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLQS7ByFqpNTWfQ:9cm4FmowdHoSdSyEpFWfQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.96d0d0063f840c06b51a05edf79a7900_JC.exe
Files
-
NEAS.96d0d0063f840c06b51a05edf79a7900_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE