Static task
static1
Behavioral task
behavioral1
Sample
NEAS.29f94aa9735b2c9a64dd58d1fe105c7c_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.29f94aa9735b2c9a64dd58d1fe105c7c_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.29f94aa9735b2c9a64dd58d1fe105c7c_JC.exe
-
Size
332KB
-
MD5
29f94aa9735b2c9a64dd58d1fe105c7c
-
SHA1
f3938aff55a318d5e5887974ff1a11315d592bea
-
SHA256
ad591035c626480074e16764ae231b378f32bd52aef7d5cdb5200dac7b1382a8
-
SHA512
6b0c9fbed93b077ea0687f832cec6b642dc05545a46a1eaaa32445226577e72feae4b831495a954e5c5b2e4daf39659d7afd934d1337c72a065a631b0f2d8168
-
SSDEEP
6144:L28TEs5D88888888888888888888888888888888788a8z888888c8F8Jkji8888:lE8Gq1RFpogXnV4MlGN1AlDkvXvtxDWY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.29f94aa9735b2c9a64dd58d1fe105c7c_JC.exe
Files
-
NEAS.29f94aa9735b2c9a64dd58d1fe105c7c_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ