Static task
static1
Behavioral task
behavioral1
Sample
NEAS.36b201fdf09c3922f10e82fa469e8120_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.36b201fdf09c3922f10e82fa469e8120_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.36b201fdf09c3922f10e82fa469e8120_JC.exe
-
Size
14KB
-
MD5
36b201fdf09c3922f10e82fa469e8120
-
SHA1
bba6e2d0e08167f2337b3a911c3b230f4b234cb8
-
SHA256
8e109b518961c1b75979af61f068ad886b90195748ec10de02d0091f81808f79
-
SHA512
7e2a5ce05034b356a22d40258c7c2502cf0691ea853c6558e7ad28946ffcfb6549e9212708840f1ffbaa17c2c6b6eb07d4efffdd5dd04f6fa704ba3857e183e4
-
SSDEEP
192:6ejEYvgFh4ht/yN864v6M9uiguiwtypvSX0+jqDE045HQBAAAA3:6e64z/ym36eyetypvS0DE045HsAAAA3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.36b201fdf09c3922f10e82fa469e8120_JC.exe
Files
-
NEAS.36b201fdf09c3922f10e82fa469e8120_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ