Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1ee018ac46d1cb5fb4b79990a21c2000_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1ee018ac46d1cb5fb4b79990a21c2000_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1ee018ac46d1cb5fb4b79990a21c2000_JC.exe
-
Size
344KB
-
MD5
1ee018ac46d1cb5fb4b79990a21c2000
-
SHA1
9cc40d7b2c7af01d99927f19fbe0c51dbd705b8a
-
SHA256
691621d732a34520948b6f55edc96310500010d47c2daf06b5d4d002a7ec5bd2
-
SHA512
6f26e5b391c95fc73500df18ee17d49ee0578452c893b6d8f4db1206e6f41ab7e98300ca6ae9989b9f0e25057d13671874e63f5bedcbc1de80c8b8dc135e85fa
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bK1:Os52hzpHq8eTi30yIQrDK1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1ee018ac46d1cb5fb4b79990a21c2000_JC.exe
Files
-
NEAS.1ee018ac46d1cb5fb4b79990a21c2000_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE