Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f2eafbd9363b68c66133f8424b13af92_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.f2eafbd9363b68c66133f8424b13af92_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.f2eafbd9363b68c66133f8424b13af92_JC.exe
-
Size
522KB
-
MD5
f2eafbd9363b68c66133f8424b13af92
-
SHA1
4915f3a45f32e3fe04247ae902a3a5d9aff5f617
-
SHA256
1b808dd14e9afd5d1e94e4cdaf333a2e46d899b8e6617312950522a36194c186
-
SHA512
bb38b106d69882236f519d5cfba591e8eea49617a26a37afd2571c97cf3162dc26a2d4e29f22610e2c94e04b092ffac5b42ec2c1b4a0ee01a9dde42d275e89aa
-
SSDEEP
3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxh:dqDAwl0xPTMiR9JSSxPUKYGdodHk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f2eafbd9363b68c66133f8424b13af92_JC.exe
Files
-
NEAS.f2eafbd9363b68c66133f8424b13af92_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE