Behavioral task
behavioral1
Sample
NEAS.1d9b2820a351442c92ae22c3da77dae0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1d9b2820a351442c92ae22c3da77dae0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1d9b2820a351442c92ae22c3da77dae0_JC.exe
-
Size
231KB
-
MD5
1d9b2820a351442c92ae22c3da77dae0
-
SHA1
47ea3302f2eac95cc95641ae13a09084b5a8e994
-
SHA256
c9464fc4a623b5e5f37410099bdede1522a8a1a5c6d0b21fe39253ae410f8fe9
-
SHA512
bffb672b38ec8f83e65f98f3772c9d02fe8721190af1fea6d055e5dff3fc626bd18007e58e29f23ee17caa0ce1479c7ed6bb7af4d373edbd41fa8caace1564cd
-
SSDEEP
3072:G0PsymB6eYc7D6JzN11sH6MI44BCAiP1HI5QrercoKaM743GQQ0fw:BP+B6eYcyJRq6MIfC/8kJ91d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1d9b2820a351442c92ae22c3da77dae0_JC.exe
Files
-
NEAS.1d9b2820a351442c92ae22c3da77dae0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE