Behavioral task
behavioral1
Sample
NEAS.fe3010ddcca2ae8dd5451ff6c7bd92c0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.fe3010ddcca2ae8dd5451ff6c7bd92c0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.fe3010ddcca2ae8dd5451ff6c7bd92c0_JC.exe
-
Size
406KB
-
MD5
fe3010ddcca2ae8dd5451ff6c7bd92c0
-
SHA1
0058ea785d051b4bfc83e54b8b23532b4a51cd9d
-
SHA256
c45b6b2871cec9ccf54027277d924b08b554d59d6888653d2aae83217c120f19
-
SHA512
3a8b2dd76f3634f3e34493fb01b7c9a0327c10d1f2c2d1d4ca68ad2c0b04b0eda832fe474ca8904efadf48481acea6bf02873c8e5bf1232f5ab408fa87ea0496
-
SSDEEP
6144:6rvono03Xvono03m09BRono03C9BRo9oc9BRof3D:6rc3Xc3m09Q3C969w3D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fe3010ddcca2ae8dd5451ff6c7bd92c0_JC.exe
Files
-
NEAS.fe3010ddcca2ae8dd5451ff6c7bd92c0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZQMacRUA Size: 1024B - Virtual size: 576B
nYuszoJT Size: 67KB - Virtual size: 67KB
peOulyPa Size: 84KB - Virtual size: 84KB
MMACOnWa Size: 2KB - Virtual size: 2KB
nekOElFg Size: 512B - Virtual size: 320B
NwnHSxyB Size: 1KB - Virtual size: 1KB
UVCjULpG Size: 8KB - Virtual size: 8KB
DJMzbsrV Size: 3KB - Virtual size: 3KB
gZPNIFMO Size: 195KB - Virtual size: 195KB
XYhXbgsV Size: 11KB - Virtual size: 11KB