Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5f77099ed33f28d30f3deec62e6d465520254c770e786b1cbd6b60ee91c79c0d_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.5f77099ed33f28d30f3deec62e6d465520254c770e786b1cbd6b60ee91c79c0d_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.5f77099ed33f28d30f3deec62e6d465520254c770e786b1cbd6b60ee91c79c0d_JC.exe
-
Size
3.6MB
-
MD5
a562e2b6581ddbe4b524acd4cd698de0
-
SHA1
cd530f30ec04e54e9f9c13034774b609d923b5d8
-
SHA256
5f77099ed33f28d30f3deec62e6d465520254c770e786b1cbd6b60ee91c79c0d
-
SHA512
5554bd07b09bf6f9fdbe6dd816b8ea296b2eaa4ab153a016d14821886d638a359a4261287e66994d3b816c259d5141a8893b99a05143bfb16d44e47de3a4bcea
-
SSDEEP
98304:M6WZh65HpZk0IKaLC2wBUFzLNSGAVLW2B4GHjyQuj7R:M6a6VkwtgoGAVLlxjBS7R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5f77099ed33f28d30f3deec62e6d465520254c770e786b1cbd6b60ee91c79c0d_JC.exe
Files
-
NEAS.5f77099ed33f28d30f3deec62e6d465520254c770e786b1cbd6b60ee91c79c0d_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ