Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d046b82d135e4cbb494d03252191cab0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d046b82d135e4cbb494d03252191cab0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d046b82d135e4cbb494d03252191cab0_JC.exe
-
Size
137KB
-
MD5
d046b82d135e4cbb494d03252191cab0
-
SHA1
16cfec23520120181f703d5f4a72c089402edc7f
-
SHA256
b488d308d4bd37902a06e5fd5649402992de32295214516e28214fc75e42709a
-
SHA512
0c8b2e64418e3bfd3f0616e34f766c6a98448456276875f379f5d162df31df3b06ce0d7afee425eccc7511fb3b98a7ac0f10c34617c7458e2ff4b4dd4392eeec
-
SSDEEP
3072:Z6pQc+sSxnTrGadgsFqZeo4pwkhUmZr3hPsOraST:Z6p2sSxTrGvsFUejWyZr3hPswa4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d046b82d135e4cbb494d03252191cab0_JC.exe
Files
-
NEAS.d046b82d135e4cbb494d03252191cab0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.didata Size: 130KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE