Behavioral task
behavioral1
Sample
NEAS.21cd145d156e670d1b627258b8168cb0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.21cd145d156e670d1b627258b8168cb0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.21cd145d156e670d1b627258b8168cb0_JC.exe
-
Size
349KB
-
MD5
21cd145d156e670d1b627258b8168cb0
-
SHA1
04fd4712dc588fe27fc0eb92f33af07c88374237
-
SHA256
d9fcaf3f69cf560eb64098bb9b8867cbd9ba3eb127ccd0f3dd436242e95fed5c
-
SHA512
570fe8c85ca7354ecf5a5885068f3ce283968d5f8ddcf27f5fd45e407516484bc81bb3e02e93f2d07a81feb6945a23ca7172c8fee536151e00aed0657ea78968
-
SSDEEP
6144:h5FrtlrIiswtAyxmbeoYRMHpeW+5GZ2NhHCUp:hHrtqi3trxg4uHJXZ2NhHC6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.21cd145d156e670d1b627258b8168cb0_JC.exe
Files
-
NEAS.21cd145d156e670d1b627258b8168cb0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE