Behavioral task
behavioral1
Sample
NEAS.e7f8354a4ce6db6705e84515b6f19cc0_JC.exe
Resource
win7-20231023-en
General
-
Target
NEAS.e7f8354a4ce6db6705e84515b6f19cc0_JC.exe
-
Size
94KB
-
MD5
e7f8354a4ce6db6705e84515b6f19cc0
-
SHA1
fe31f781e91c01d8a15efd67a7bf98ea6dcd45b4
-
SHA256
2fbb9805bbf9e16be16fd61378c8e697aa03f9597b017cdf2ea58ac15b2e9798
-
SHA512
7196aafa5e55ff9510d3d795a92fef157e7a4aa75dd86aa57a88666381aba9c555a66bbb7e44b92d45cad40d61c10790e2d285bdd838438d81afb8fe45734c43
-
SSDEEP
1536:/vQBeOGtrYS3srx93UBWfwC6Ggnouy8jb5D1gMHzRjgF9EsZD/dOnDrS:/hOmTsF93UYfwC6GIout3Hlsdb4DO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e7f8354a4ce6db6705e84515b6f19cc0_JC.exe
Files
-
NEAS.e7f8354a4ce6db6705e84515b6f19cc0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vryeypb Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE