Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c8e99488a3215672ed9b0b9cb5c98fa1_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.c8e99488a3215672ed9b0b9cb5c98fa1_JC.exe
-
Size
192KB
-
MD5
c8e99488a3215672ed9b0b9cb5c98fa1
-
SHA1
39a410f98e7ec268f92a991eac17769357220ab6
-
SHA256
5de8470a6cd3bd06636d96c16801b82b6aeef47a2db1bb8ca7368ce1f0cf6e96
-
SHA512
b4bf1b6f692f71f59282d9f9bbad937e58badf035c126f82d94d82913eea2f9b0117807a319f2bbf765c70143ed4ae069c29cd2b016b0748ef90c2ef3259ebbb
-
SSDEEP
3072:DWTeUSUf5NgokdbfvrXzEFtD2rQogicqwmln8By8aQirYOFQrjY1NHPy2KT:ymUzarrXEtDKQoBfl8srQiYaQry5Fw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c8e99488a3215672ed9b0b9cb5c98fa1_JC.exe
Files
-
NEAS.c8e99488a3215672ed9b0b9cb5c98fa1_JC.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 161KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE