Behavioral task
behavioral1
Sample
NEAS.717c9ea2119a71b2e30e0ba7947970c0_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.717c9ea2119a71b2e30e0ba7947970c0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.717c9ea2119a71b2e30e0ba7947970c0_JC.exe
-
Size
60KB
-
MD5
717c9ea2119a71b2e30e0ba7947970c0
-
SHA1
6664f6fd5ee2d8ee10c2802b7321ae55a427c738
-
SHA256
d1af0784d887e25d646254e5e357e148de25a006e7247c55ff4e31ab7bb31709
-
SHA512
cb0212fc01a7793776e027803e35aae4d0987e45b031dc9576e950b0297aaf6f9350c9fb96247604c58f10fb7d5fecf2d46c06ddf6c882ca2ff34ab4a9253591
-
SSDEEP
1536:CSkqNsb/6YPyKchaY9/JI1R8TzF2FLhE5GEZkphY8Sf:CSkcsbCYPyZ99ARKFugGMkp28y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.717c9ea2119a71b2e30e0ba7947970c0_JC.exe
Files
-
NEAS.717c9ea2119a71b2e30e0ba7947970c0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 572KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE