Behavioral task
behavioral1
Sample
NEAS.be122115bc9ed738627dd8ba3fc8b420_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.be122115bc9ed738627dd8ba3fc8b420_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.be122115bc9ed738627dd8ba3fc8b420_JC.exe
-
Size
77KB
-
MD5
be122115bc9ed738627dd8ba3fc8b420
-
SHA1
4f3786516631a1b060f6fddd2a5783b0436ed344
-
SHA256
6c53d239f19a657399aa0befd847e11c9d959573f2d6d83e904420940994436d
-
SHA512
c33d206b7205e6954c6c60d85896e8588b39da6018d8d335c38f64b1ec3311195e4d77f0f2da0c676e7930656ca49d0d9fdb8760810a6fcd1790001eb4682a96
-
SSDEEP
1536:hpn90PLwE0BhAvk50yFJE8aVnRdGmWLCWrd3CgU5A3PoAdrhRcXUxL:j6PsdSk50yF3unqmWWUCg6A3PoAd9uEB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.be122115bc9ed738627dd8ba3fc8b420_JC.exe
Files
-
NEAS.be122115bc9ed738627dd8ba3fc8b420_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE