Behavioral task
behavioral1
Sample
NEAS.e6e5aafbf15ce3dd090a0c481f75d490_JC.exe
Resource
win7-20231025-en
General
-
Target
NEAS.e6e5aafbf15ce3dd090a0c481f75d490_JC.exe
-
Size
84KB
-
MD5
e6e5aafbf15ce3dd090a0c481f75d490
-
SHA1
f11cb0093e5764acf4de31cb08f8f4cd4cc47201
-
SHA256
81d3bcfad4ac748034dd214239183c8292376224a5c4ab9f45c9f416bc072114
-
SHA512
d64984d3f4e6dbd9b696b52e65eb7efbab0bd5a5a1b556a0f47b4ee67b165de6ec2fc61d127d5b4565b6a8aeeb98616204573f580b7892bf8a0e46c476ddbed6
-
SSDEEP
768:/pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEmz:BeT7BVwxfvEFwjRz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e6e5aafbf15ce3dd090a0c481f75d490_JC.exe
Files
-
NEAS.e6e5aafbf15ce3dd090a0c481f75d490_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE