Static task
static1
Behavioral task
behavioral1
Sample
NEAS.167605b54975c5e6d55be95cd9437170_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.167605b54975c5e6d55be95cd9437170_JC.exe
-
Size
973KB
-
MD5
167605b54975c5e6d55be95cd9437170
-
SHA1
49eeab1bfc33caa16d2cf7aa28ca7174847b25b6
-
SHA256
1a3f768f279beab9ed67418260ca0f33dcbbd0294d169dc2964cdcd7dd2f82c7
-
SHA512
fe99575e1d0948b9381be1b93f1ccbdcffc6aa50811eefd452faad98885b0e75d46a3bada7262ce9faf50c1e3485dd9d88260176ffb6ebb3966bd008c4b2dcb0
-
SSDEEP
12288:2IE7s9BwgdEUuwx6GbUlSEY/0rG1iEyccj5IFm7zIJ3j6GdVoAo:fE7s9BLdEUu2b1EZIit5im7zGGGj+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.167605b54975c5e6d55be95cd9437170_JC.exe
Files
-
NEAS.167605b54975c5e6d55be95cd9437170_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 682KB - Virtual size: 681KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ