Static task
static1
Behavioral task
behavioral1
Sample
NEAS.de0f048a3b9ea2b38fef5a7316d51a00_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.de0f048a3b9ea2b38fef5a7316d51a00_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.de0f048a3b9ea2b38fef5a7316d51a00_JC.exe
-
Size
110KB
-
MD5
de0f048a3b9ea2b38fef5a7316d51a00
-
SHA1
e871b57a99788df245f88ce594d6adee8ace6cd2
-
SHA256
7cb3a1f46ab97b902383f87e5294d95adfe146da38f40be24a7cdad85ffa0e66
-
SHA512
f975141ebdcf0941c12fe0879d3f7db6988fad5c2aa1dc31bcc2ddcd282c428f7cbe71bca50bbd28d1b52a13a257a0cc4d08b2ce32c556752f86c260bdbaedd8
-
SSDEEP
1536:oF+Mzcp0z0kYkmozlFoB2ucaF12EF0Tn3olBbczJRY+zA6AZDTkQKcHcxdTlB3:oF+Mzce7cgzeSn3s60nDTkjcHcxdTr3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.de0f048a3b9ea2b38fef5a7316d51a00_JC.exe
Files
-
NEAS.de0f048a3b9ea2b38fef5a7316d51a00_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ