General

  • Target

    NEAS.17a9a0c702531c81663c13176216b7a0_JC.cab

  • Size

    2.8MB

  • MD5

    17a9a0c702531c81663c13176216b7a0

  • SHA1

    224e5d7c48c46ffa939481ec66e1ac61297c2241

  • SHA256

    a26ca3fd670d10133d9c588a40de9baac0713f872393a2b776331349601a6f60

  • SHA512

    c2d03e2d4f15eac0b67a139efd709c181ee69da90d7c0240d772fcc588b67c9d2a64a70c59e177a012a19cb0608262fd12ff1645a136218f82836a413dce9428

  • SSDEEP

    49152:A1uIHzItIGOHUhsdimb4aDKnES6fG/UEHcKCZXpnZD50pdOzPVTANKLcU5mpfg5:auITG2WYrJoL/UscHnZ9zVTAsI45

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.17a9a0c702531c81663c13176216b7a0_JC.cab
    .cab
  • libcef.dll
    .dll windows:6 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86


    Headers

    Sections

  • svchost.exe
    .exe windows:5 windows x86

    8eac9f4421dacee9fe93600357324ec8


    Headers

    Imports

    Sections