Behavioral task
behavioral1
Sample
NEAS.518b6ab688d5b8348e2e742b820533c0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.518b6ab688d5b8348e2e742b820533c0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.518b6ab688d5b8348e2e742b820533c0_JC.exe
-
Size
123KB
-
MD5
518b6ab688d5b8348e2e742b820533c0
-
SHA1
27b2be6b79e06b56f4fcf3e8134c8b55b011acc2
-
SHA256
6ca5478dbad8fcb1b65964d045f4060969fa28f412406e60f101921b54e97ae7
-
SHA512
7fed545d61c6af1b17fe110babeea2f8ecce515a396067f4da68cdc3b3f54bcf87993b41c48fad39b0ebba6a9f7f9a0f35df32495a934d4c4cb3d62015450758
-
SSDEEP
3072:fTi6482TTJDoEDsPLChQVNbmsyS74YUuc/HkUtKSKX:7Fn2pTDm4uNbmsV4YUuEH4SG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.518b6ab688d5b8348e2e742b820533c0_JC.exe
Files
-
NEAS.518b6ab688d5b8348e2e742b820533c0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE