Static task
static1
Behavioral task
behavioral1
Sample
NEAS.be56d603a151271cce388a9453cfe6cb6cfa9e36dfa225413fac2e086f39f9f7_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.be56d603a151271cce388a9453cfe6cb6cfa9e36dfa225413fac2e086f39f9f7_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.be56d603a151271cce388a9453cfe6cb6cfa9e36dfa225413fac2e086f39f9f7_JC.exe
-
Size
5.2MB
-
MD5
1000a24729fdab7f08266881f2e9ae62
-
SHA1
3fbf77f07e4cff1d4813ae472960c974063305f3
-
SHA256
be56d603a151271cce388a9453cfe6cb6cfa9e36dfa225413fac2e086f39f9f7
-
SHA512
65f5b8a5e861dd7463c915ef50467de20d11cbfc7cc677a0eb1f5a15b954151d87785d911084fe7ded13bd65f6ac7ad9b0e65759e31d7f7b51607304f6b50d40
-
SSDEEP
98304:S5DU1HPtkjmxiY6OQGWGedbEZf3JCwfU1E/ltY4ExV/ZokAtFjbyrta5UnABUoR:S5uToYjeeZM91E/lS4ExV/Zy7f4ta5h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.be56d603a151271cce388a9453cfe6cb6cfa9e36dfa225413fac2e086f39f9f7_JC.exe
Files
-
NEAS.be56d603a151271cce388a9453cfe6cb6cfa9e36dfa225413fac2e086f39f9f7_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LANP Size: 504KB - Virtual size: 987KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LANP Size: 216KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: 36KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 2.3MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LANP Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LANP Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LANP Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ