Behavioral task
behavioral1
Sample
NEAS.a6a72aeecd97e280c9a1a406b6db5790_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.a6a72aeecd97e280c9a1a406b6db5790_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a6a72aeecd97e280c9a1a406b6db5790_JC.exe
-
Size
418KB
-
MD5
a6a72aeecd97e280c9a1a406b6db5790
-
SHA1
ce2407e7b0b90253f1d53f468a67c71dee63e98f
-
SHA256
53e28a5d7da53eebe5ff5f5964d3d700b8117436f8d9c18222459c22ab211a12
-
SHA512
4efa730d6e5875f2e4be6e986764f6072dbb469c856db48f888baf3f1fd925725ee07a08650ade6559cd51e75e63e072e5a36118b8677f9fc6eeade2a656cb5a
-
SSDEEP
12288:VEQoSfqTODUKzQ3QaRrpzwoT0XHK5SCqMg:VcODdziRr1PgXHK8VV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a6a72aeecd97e280c9a1a406b6db5790_JC.exe
Files
-
NEAS.a6a72aeecd97e280c9a1a406b6db5790_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE