Behavioral task
behavioral1
Sample
NEAS.60f7c420eb37c0aa58d0e2bf12be07d0_JC.exe
Resource
win7-20231025-en
General
-
Target
NEAS.60f7c420eb37c0aa58d0e2bf12be07d0_JC.exe
-
Size
84KB
-
MD5
60f7c420eb37c0aa58d0e2bf12be07d0
-
SHA1
6766f5c43431886291385a94e971356a42ce3a86
-
SHA256
cf237868b9df986eb93d656f6cee135a6f74c9d87e07204d98a0bb662a7fbc27
-
SHA512
7e5cb4674c0a579debbda275dc092e722c6340ccc59ac67d068dec6dcb106f3f5f269ca581bf2e8c1d80a34a0abfef26bd902b226d172d731631db48e6fa55bd
-
SSDEEP
768:/pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEm0B:BeT7BVwxfvEFwjRA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.60f7c420eb37c0aa58d0e2bf12be07d0_JC.exe
Files
-
NEAS.60f7c420eb37c0aa58d0e2bf12be07d0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE