Static task
static1
Behavioral task
behavioral1
Sample
NEAS.00015c80a1ec083755e61c0448a9ccb1_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.00015c80a1ec083755e61c0448a9ccb1_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.00015c80a1ec083755e61c0448a9ccb1_JC.exe
-
Size
351KB
-
MD5
00015c80a1ec083755e61c0448a9ccb1
-
SHA1
6f08639475476be224091aaa90bf0d8eb01ec03a
-
SHA256
021c3684e28d62fd21f83b700d12f8a74a1173d24f066ed63c7d2123f949f07a
-
SHA512
87cd49cca04e055cee991a1c905bcb892392e2c1c5eaf7a756f0da751806e42d967014c6f449983a8c9b71f02f76e54a9d73c66095bf0722db5624a9a55cf833
-
SSDEEP
6144:T0pXKDTjYt7eozrkqC8PcnFK2JtG6lXNYcuI7IS7EfPRZC76yA:T0pXKDTk1eyUFVlVGS7EGdA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.00015c80a1ec083755e61c0448a9ccb1_JC.exe
Files
-
NEAS.00015c80a1ec083755e61c0448a9ccb1_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
cc870 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cc871 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cc872 Size: 769B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE