Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1b06d212e2f4320c62a813c93f1dc410_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1b06d212e2f4320c62a813c93f1dc410_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1b06d212e2f4320c62a813c93f1dc410_JC.exe
-
Size
599KB
-
MD5
1b06d212e2f4320c62a813c93f1dc410
-
SHA1
2207de627a55072b756580f37e791dcec97d1a1a
-
SHA256
eb15faf0452175bac8c6bb7c24a55a028c56609678457438eecf8ca76f9022e2
-
SHA512
bdb5820f40e6e326c0faf078f045048509eea0b5666aca5106f39def0ef6575655e6934aea3e2fe35d5269f0bd8792311f82c5fba48a03646e4839c39f0db932
-
SSDEEP
6144:wqDAwl0xPTMiR9JSSxPUKPdodHWfKCibLkpQIDorqOXk:w+67XR9JSSxvPdodHWfAsmIMe7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1b06d212e2f4320c62a813c93f1dc410_JC.exe
Files
-
NEAS.1b06d212e2f4320c62a813c93f1dc410_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE