Behavioral task
behavioral1
Sample
NEAS.f2a54adfe0cf72b19c34df89b5d898d0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.f2a54adfe0cf72b19c34df89b5d898d0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.f2a54adfe0cf72b19c34df89b5d898d0_JC.exe
-
Size
588KB
-
MD5
f2a54adfe0cf72b19c34df89b5d898d0
-
SHA1
5cd8b1382155a3fcb10a32675a21650a9596dba5
-
SHA256
e94b3624e67e0fc64e805a74d1d08e5cfecae59cb2d8fe527825380a685773b4
-
SHA512
83847ed511866c61684d7e927c07a4164f508bb353e8ae1ba1946e1186a444a85009853e4c3f79532be2ee4a53ad01bc1bca52f96cc489bfa6b7bb5b7b33c8cf
-
SSDEEP
3072:pCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V1MQTCk/dN92sdNhavtrVdewnAx3wmVU:pqDAwl0xPTMiR9JSSxPUKpdodHz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f2a54adfe0cf72b19c34df89b5d898d0_JC.exe
Files
-
NEAS.f2a54adfe0cf72b19c34df89b5d898d0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE