Behavioral task
behavioral1
Sample
NEAS.ea410bf02c3e11bb6beb7ef4713b11e0_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.ea410bf02c3e11bb6beb7ef4713b11e0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.ea410bf02c3e11bb6beb7ef4713b11e0_JC.exe
-
Size
156KB
-
MD5
ea410bf02c3e11bb6beb7ef4713b11e0
-
SHA1
8ae34371f7158e9dd516a224e26013f94c4c44bf
-
SHA256
14a1bd83302dd1fe9f36d27804e33f12df0d5344955efe9f5b477f34df4b29d1
-
SHA512
722b898f6e8343f70011137a946a86eb1c31b61acb8b4788da154e70efc1452ad3555587ba3c3b46b25da51b7dd01a8fd337859e1d7f0eb258885975004514dc
-
SSDEEP
3072:LBbd4CigOqCWTvrQnU1TO7Ihm+1581hWh:xxT11Tgkz1581hW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ea410bf02c3e11bb6beb7ef4713b11e0_JC.exe
Files
-
NEAS.ea410bf02c3e11bb6beb7ef4713b11e0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE