Behavioral task
behavioral1
Sample
NEAS.87b9790dc9d4779f2ea34d6e25160080_JC.exe
Resource
win7-20231023-en
General
-
Target
NEAS.87b9790dc9d4779f2ea34d6e25160080_JC.exe
-
Size
377KB
-
MD5
87b9790dc9d4779f2ea34d6e25160080
-
SHA1
4a4d8408c42b37559ff0186d7bc96f68588d5ac4
-
SHA256
07f375ffb10f641409f571758bea1d72f485546edc72c0fa0129560d953f0524
-
SHA512
2d03bfe484d41cdebfc2328e45eb4d24cc5e56c290c7b9c204b7268824c1d7527d9dde5422b9fa17ffe65996d3c4013be33d60adc825f8ff49eff1899e18f82e
-
SSDEEP
6144:xcm4FmowdHoSPubPJZ+MxwdHoSL51DG9Vk/KxTdBMhwGx:74wFHoSPubRR8HoSjKV2KxTdBMhwu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.87b9790dc9d4779f2ea34d6e25160080_JC.exe
Files
-
NEAS.87b9790dc9d4779f2ea34d6e25160080_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE