Static task
static1
Behavioral task
behavioral1
Sample
NEAS.03148ac797ed98c7a8ab0064a6ec84b0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.03148ac797ed98c7a8ab0064a6ec84b0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.03148ac797ed98c7a8ab0064a6ec84b0_JC.exe
-
Size
26KB
-
MD5
03148ac797ed98c7a8ab0064a6ec84b0
-
SHA1
a6e1661b325347edf8944bc7cfed8423e0ff35b7
-
SHA256
d2bb49f1579d7add3dbc40e0936697a03164b6073c1e70c46554e6cebf07dc97
-
SHA512
035c69a2b7df0a9ece380d28f9715e94dcc44fe5089a00cd51836a219e8911802b0412f204dd195c4e1aa634f9371bf972b4ad5419e78e1a5de8e98adcd2bb35
-
SSDEEP
768:9d5u7mNGtyVfhJAQGPL4vzZq2oZ7G1xIbO:9d5z/fhdGCq2w7l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.03148ac797ed98c7a8ab0064a6ec84b0_JC.exe
Files
-
NEAS.03148ac797ed98c7a8ab0064a6ec84b0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��su�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE