Behavioral task
behavioral1
Sample
NEAS.ebbfc640a3575c50badb37581d5305f0_JC.exe
Resource
win7-20231025-en
General
-
Target
NEAS.ebbfc640a3575c50badb37581d5305f0_JC.exe
-
Size
784KB
-
MD5
ebbfc640a3575c50badb37581d5305f0
-
SHA1
2b6982fbb9647b558653a70ab120d7f7a7d0e904
-
SHA256
9d6043b7f048410904638f56428a7e68a37844b8cf6ada74ee9309ad776880e6
-
SHA512
423a22778c67744d435efab596036bc5cee85202b1a9f42443211c6cd2eaafd3110f2e66ab441c81a2dca2feef0cd2464c2f19d0b2ba8014ae16cac8c27f098b
-
SSDEEP
24576:mNWBY3+tMAK+qYww5CBCE6gaQY9r8h86tUu0:IWBY3mMAtqYPQNA8i6uu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ebbfc640a3575c50badb37581d5305f0_JC.exe
Files
-
NEAS.ebbfc640a3575c50badb37581d5305f0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE