Behavioral task
behavioral1
Sample
NEAS.769f1b0dffaa992bc95478f049f2e400_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.769f1b0dffaa992bc95478f049f2e400_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.769f1b0dffaa992bc95478f049f2e400_JC.exe
-
Size
187KB
-
MD5
769f1b0dffaa992bc95478f049f2e400
-
SHA1
d1ac557d2da6fadce225db9d07dff87869613c1d
-
SHA256
0361ba7ab082eb87d5f427b808b060d3143c642dc2c6b9731a03f7bcfc39a682
-
SHA512
2fa92e00aea7aa52dd8692993aaf414622f63516a50798ccdb7c5e2f001a5b7545e723c41c34152d709a2fd3a89b201a5977b7b5e7cdf7e446284533e8d06bb9
-
SSDEEP
3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvKkzkFuSuYWh4IqL1s3j:02pdqfv2IPOGfXf5ovWvtkUSrWh4IqLo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.769f1b0dffaa992bc95478f049f2e400_JC.exe
Files
-
NEAS.769f1b0dffaa992bc95478f049f2e400_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE