Behavioral task
behavioral1
Sample
NEAS.ab02ea324152a9bae44b737299da0ff0_JC.exe
Resource
win7-20231025-en
General
-
Target
NEAS.ab02ea324152a9bae44b737299da0ff0_JC.exe
-
Size
89KB
-
MD5
ab02ea324152a9bae44b737299da0ff0
-
SHA1
bd481c6c2033408dd75d43ec364b428c4f43dc30
-
SHA256
03487ceeb78f2b0ec097cf77afd4bae2f5c411f743cd224689f6052f4e8386c4
-
SHA512
8f672ce21abfd2923dd23cc966eb8062ee51911a6fd8ca7a03a5455e768ea6551025f62b4ac6f3adc80123625b41473db9c540d6a98f368cc910a4b994b3d984
-
SSDEEP
768:2pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEmJtb:2eT7BVwxfvEFwjRJB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ab02ea324152a9bae44b737299da0ff0_JC.exe
Files
-
NEAS.ab02ea324152a9bae44b737299da0ff0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE