Behavioral task
behavioral1
Sample
NEAS.b9c297021dbc44477a229dc22085fec0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.b9c297021dbc44477a229dc22085fec0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.b9c297021dbc44477a229dc22085fec0_JC.exe
-
Size
126KB
-
MD5
b9c297021dbc44477a229dc22085fec0
-
SHA1
8a6bfe43d4a91a429f7b8a64601795be3fe366c2
-
SHA256
3b139e55a2c3e9e2a73bc35f5ab11f7ea26e1f23c89daaf7bf23feb9a47087ae
-
SHA512
8f98870bcbe438a39814709da9cc69e0b1545c0cde9cbe54e6676ec7f2777152e1bc035aa29caf43eaaf0afa1afa354dd373541c94b9d448463e37b9ae6eb657
-
SSDEEP
1536:YcbqyEk65QiMa2Zi2tSVG4FnjJdLl19/Gb6XBMC4HteMLBd2:7LSQilNIHujLl19/Gb6XBMBeMLBd2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b9c297021dbc44477a229dc22085fec0_JC.exe
Files
-
NEAS.b9c297021dbc44477a229dc22085fec0_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE