Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0523305b0efdbae2b176148a9cb62482_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0523305b0efdbae2b176148a9cb62482_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0523305b0efdbae2b176148a9cb62482_JC.exe
-
Size
289KB
-
MD5
0523305b0efdbae2b176148a9cb62482
-
SHA1
df6a7c7c87d0287a9fc253eec362d86c4d3ad6f9
-
SHA256
3b602704e3eef7bdd3a9f64573cfb59303c19e72a313609851b28596aad8babf
-
SHA512
24e0ec5afeaf2bf6c68af6d174107ecf8d7703ab78602ffe8877b2f73fe5811356ed12c23cf886d38d75f22d3a24770311acd5ff505253c436117b3fea33addc
-
SSDEEP
6144:KafcEHI/prnm4y3NjTjuC8xOcxphrKJcfh2m71Z:nHIhnmn9jT8Xp71Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0523305b0efdbae2b176148a9cb62482_JC.exe
Files
-
NEAS.0523305b0efdbae2b176148a9cb62482_JC.exe.exe windows:4 windows x86
3e3d633779e35448851e7a9ca7e72522
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
Sections
.MPRESS1 Size: 163KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE