Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cff80c5ce109c8663546546b9d2a5154_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.cff80c5ce109c8663546546b9d2a5154_JC.exe
-
Size
319KB
-
MD5
cff80c5ce109c8663546546b9d2a5154
-
SHA1
6170060d8a6b71674c63b69c1b0ea6e9461733c2
-
SHA256
ebf29eb86fafb581ec88eae24fbd48df9bd3920b7dada2d161fdc8999a3480ad
-
SHA512
2886828d1a8ebea772be8503b2a5969b82394ea8614056f2be0b0089ea5da670c709933ce5e9518d5fdb9a18ea49cfb3273b57cc324c5bd46f5d00fd80fb8bb5
-
SSDEEP
6144:sY4zSop9m06QbGTCnTRoOIH3FPA7AthtLpz:PkXpd6jqiOIHZAK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cff80c5ce109c8663546546b9d2a5154_JC.exe
Files
-
NEAS.cff80c5ce109c8663546546b9d2a5154_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 266KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 483B - Virtual size: 483B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ