NEAS[.]02d7186b977b4299a1afd2e431446ec0_JC[.]exe | Triage

Sharing

General

Target

NEAS.02d7186b977b4299a1afd2e431446ec0_JC.exe
Size

76KB
MD5

02d7186b977b4299a1afd2e431446ec0
SHA1

ce2bad5348e408fbae28c38136e5eecb3b4e7dea
SHA256

25951250376b48e4ef012d876e1cbdf13dec84ddd7d4051c77e6647586432857
SHA512

b330713c13b5ef592f27c85fff2dbdb2c3b7f51f8116cdeb862eace1b2c19bde272b3e4097f836b104d166c6102f8ad0a23e0a681662c3f3428b6dd182d7d74c
SSDEEP

1536:Uvexs6pWGq6cjTArxtvRCLB6Px9+3cu9V+gKW:KcpWGqzjTALRCLB6ZAs+VBKW

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
NEAS.02d7186b977b4299a1afd2e431446ec0_JC.exe
unpack001/out.upx

Files

NEAS.02d7186b977b4299a1afd2e431446ec0_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ