Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e349409dbce7245c88e936f3fccf0c00_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e349409dbce7245c88e936f3fccf0c00_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.e349409dbce7245c88e936f3fccf0c00_JC.exe
-
Size
785KB
-
MD5
e349409dbce7245c88e936f3fccf0c00
-
SHA1
67acfa88c7a5504eb10dbba231c0ea5a616fadae
-
SHA256
a4f840831885e9517de7b724072bee946d7f9f912e1a7a2500c76f911c3f1dc9
-
SHA512
5b869138d6433744244b292b0e35251aef3dfcc995f52844c87c5653129b196fb8c61cdcc8c002dc0cb2779c51d99e28e1f2bf5f2eb9a41d1208af41dd60db09
-
SSDEEP
12288:9n8yN0Mr8ii6aVs7C/yFU40vy3W/ceKSHMsiFyY6XNt1fJK35vh1oKlBEEAFvBf:FPuiizICKujymk4HM5yJty35vAKlBExf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e349409dbce7245c88e936f3fccf0c00_JC.exe
Files
-
NEAS.e349409dbce7245c88e936f3fccf0c00_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE