Behavioral task
behavioral1
Sample
NEAS.0f33b7b1c1d5adeddc20932bed5adad0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0f33b7b1c1d5adeddc20932bed5adad0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0f33b7b1c1d5adeddc20932bed5adad0_JC.exe
-
Size
434KB
-
MD5
0f33b7b1c1d5adeddc20932bed5adad0
-
SHA1
5c895e7e4d94994f3edfa368667b76278faa4a84
-
SHA256
2e03472b300164f670728a6e91a6a396903d5b87ac922f41a35915add9c46183
-
SHA512
8a9291e4c4ce917fb64a99bba9de6bb3548b6a1361c45fe47a13107e646b31bdbeb95cae9c32fb2ee0234dae593262e887767dbd3fa979e6ad877a7d5eb6f21f
-
SSDEEP
12288:ZEQoS5OHe+XoAMNtf3B699QLKFTxCqSjY5zeAYELv:Zy++YvNtf3B6DQLExCqPzrLv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0f33b7b1c1d5adeddc20932bed5adad0_JC.exe
Files
-
NEAS.0f33b7b1c1d5adeddc20932bed5adad0_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ