Behavioral task
behavioral1
Sample
NEAS.85629e8d88a89e1f061a4e04d2437380_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.85629e8d88a89e1f061a4e04d2437380_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.85629e8d88a89e1f061a4e04d2437380_JC.exe
-
Size
380KB
-
MD5
85629e8d88a89e1f061a4e04d2437380
-
SHA1
55b569b56d94f7e5ddb8a727c8a3c1c3d4c77aad
-
SHA256
f4fb6760f67c8032c119729cd4fc7d34f370cf2f54d4460e72086d946b86e967
-
SHA512
fef25f9af90a76a829a22d11a519416cbe60e6651f04adec58a98731e7ffd1965b6aca4df2bb0a6d9b1c3356dc5a55399a6567f1a4af0be5929e8690029919f3
-
SSDEEP
6144:vhbZ5hMTNFf8LAurlEzAX7oAwfSZ4sXUzQIl/BDcTd9F:ZtXMzqrllX7XwfEIl/BDi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.85629e8d88a89e1f061a4e04d2437380_JC.exe
Files
-
NEAS.85629e8d88a89e1f061a4e04d2437380_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE