Static task
static1
Behavioral task
behavioral1
Sample
NEAS.18f79c3f3c1b1255cc7947289c748180_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.18f79c3f3c1b1255cc7947289c748180_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.18f79c3f3c1b1255cc7947289c748180_JC.exe
-
Size
26KB
-
MD5
18f79c3f3c1b1255cc7947289c748180
-
SHA1
8da60523e41cf8eaa87f527bbd93c45cfd0dee80
-
SHA256
a93813256ffebe2d192eda607333515bef46327d1fddfca7729144b04bdab500
-
SHA512
785c14619611fb263365a9e9df93ede992268cd184202835e7906e7b3d9f489fc13fe5d5be8b3ca521deb4240be3a2119445e763919d08e864bd8ccf98b16a28
-
SSDEEP
768:cd5u7mNGtyVf7AsQGPL4vzZq2o9W7GsxBbPr:cd5z/fcvGCq2iW7z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.18f79c3f3c1b1255cc7947289c748180_JC.exe
Files
-
NEAS.18f79c3f3c1b1255cc7947289c748180_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��su�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE