Static task
static1
Behavioral task
behavioral1
Sample
NEAS.87e15d2cc803930c325374216caff0e395638cd4cfc97644db8a3b9a0b52012c_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.87e15d2cc803930c325374216caff0e395638cd4cfc97644db8a3b9a0b52012c_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.87e15d2cc803930c325374216caff0e395638cd4cfc97644db8a3b9a0b52012c_JC.exe
-
Size
8.9MB
-
MD5
e128ebed804142607f503a1dd11d665d
-
SHA1
29b60008640585a9c71c0c4dc43f9270c5cae5cc
-
SHA256
87e15d2cc803930c325374216caff0e395638cd4cfc97644db8a3b9a0b52012c
-
SHA512
566511851cd60a38e6d890b4c4118ec28fd6a40040f5043be6fbe88224338c2a4ef181e13f865900e6f97b24c9573390850228ec6a42afbbc7436b9b597d184b
-
SSDEEP
196608:h6FZgcdFdcz/IC4LprUX4qWoTvby+FaJfhBQ3ThrcEW:hD6cz/ICkrUIqWiuP/Edt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.87e15d2cc803930c325374216caff0e395638cd4cfc97644db8a3b9a0b52012c_JC.exe
Files
-
NEAS.87e15d2cc803930c325374216caff0e395638cd4cfc97644db8a3b9a0b52012c_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LANP Size: 432KB - Virtual size: 918KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LANP Size: 5.9MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: 36KB - Virtual size: 530KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 588KB - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LANP Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ