Behavioral task
behavioral1
Sample
NEAS.631d7c169bb95bbce7b1c16238b01040_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.631d7c169bb95bbce7b1c16238b01040_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.631d7c169bb95bbce7b1c16238b01040_JC.exe
-
Size
577KB
-
MD5
631d7c169bb95bbce7b1c16238b01040
-
SHA1
38404a1e0d2afd5eb51927e1f7c27e1b9a8dac35
-
SHA256
06affe06c2b205afd192f38ad86157bc1c5c75d12219cc569de187c9fb9d4b04
-
SHA512
4033292a831d9afdbc79d10cb108e7b242d2dde9151f43c2c5230a430cb666fbc2880e6d965bb2a984c5d9de855b198c6825d806e6884a415e92bd53a9b13c2d
-
SSDEEP
6144:Z+LQwhNI65MY5wH2l3D5YolYvRjf6yl/5JTFw1iKzHk2oGbksEG5iFeeGa:ZMQwA65YHWDeXvRjf6YnyixGbkMoLt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.631d7c169bb95bbce7b1c16238b01040_JC.exe
Files
-
NEAS.631d7c169bb95bbce7b1c16238b01040_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 328KB - Virtual size: 24.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE