Static task
static1
Behavioral task
behavioral1
Sample
NEAS.25c71b532266e4c13f4065749664073f96174da6a92c4c0a717dac787f91ea67_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.25c71b532266e4c13f4065749664073f96174da6a92c4c0a717dac787f91ea67_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.25c71b532266e4c13f4065749664073f96174da6a92c4c0a717dac787f91ea67_JC.exe
-
Size
3.0MB
-
MD5
8c8b07ec25d45c6242d7db5c163fee20
-
SHA1
8baa1cd0a1db96918c8a1c917816bf4f9bae5a10
-
SHA256
25c71b532266e4c13f4065749664073f96174da6a92c4c0a717dac787f91ea67
-
SHA512
f44378f82ff80bd594487ceebc997d190cf35c1f2bfd914a5f003693771b47f633219a2209ce06f69a441e5b1388045f30365deec0a42b600e42af6512c94c8c
-
SSDEEP
98304:g4ithRx1Ck9IVbiv+G2XCOduftR5+YKrf:gJXRx1Ck9kbyZ2XCOdufYYKz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.25c71b532266e4c13f4065749664073f96174da6a92c4c0a717dac787f91ea67_JC.exe
Files
-
NEAS.25c71b532266e4c13f4065749664073f96174da6a92c4c0a717dac787f91ea67_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LANP Size: 480KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LANP Size: 624KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: 36KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LANP Size: 16KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ