Behavioral task
behavioral1
Sample
NEAS.51cfe38b3b42e8f35c42d8df69dc51d0_JC.exe
Resource
win7-20231025-en
General
-
Target
NEAS.51cfe38b3b42e8f35c42d8df69dc51d0_JC.exe
-
Size
165KB
-
MD5
51cfe38b3b42e8f35c42d8df69dc51d0
-
SHA1
e2dab59b09399fd54e7cbde044b06cb7458de4c4
-
SHA256
afbdbadf9772a802eb83830e1428c7853280450155282f74538bfaf5bcd2200a
-
SHA512
6a7a80ac2344d735302ed85b030705f7731e45e34be7b9725ec0a2b2934c5c914e515f961be7174dd21711d03b40ec895ce56bdd187045135553cbed28692f7f
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JjKzO0Y9Pe/j+a1ylYGr:9cm4FmowdHoS4WzO7BuqJlYg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.51cfe38b3b42e8f35c42d8df69dc51d0_JC.exe
Files
-
NEAS.51cfe38b3b42e8f35c42d8df69dc51d0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE