Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ce24a12cd998a4e9efeb94297f8ab3e255040f3204b549f9d2890765490e3c9aexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.ce24a12cd998a4e9efeb94297f8ab3e255040f3204b549f9d2890765490e3c9aexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.ce24a12cd998a4e9efeb94297f8ab3e255040f3204b549f9d2890765490e3c9aexe_JC.exe
-
Size
637KB
-
MD5
dff1405a739264d01f3cf6fb6002d7d7
-
SHA1
726ac25c939e9b86669812e4f3fdb60c220ac356
-
SHA256
ce24a12cd998a4e9efeb94297f8ab3e255040f3204b549f9d2890765490e3c9a
-
SHA512
08e5474e83a7686bcf365cfeaf86b682b11bd5efc84b94e39667210098a40b16979604411cb6225f99be0267eefc7687bf9523380a69355e5336ec6a14050af1
-
SSDEEP
12288:Kw/j2Yz3LGgH9wt2yApDJc+aj2Q6fHf4OBzNBSOGGAlP4IxwCsMXyDbzG3warH:PL2obHKTyi+q2ZZzNBSOGGAiINsV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ce24a12cd998a4e9efeb94297f8ab3e255040f3204b549f9d2890765490e3c9aexe_JC.exe
Files
-
NEAS.ce24a12cd998a4e9efeb94297f8ab3e255040f3204b549f9d2890765490e3c9aexe_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 631KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ