Static task
static1
Behavioral task
behavioral1
Sample
NEAS.NEAS6b0d4f83143250bb130abca8f46b5bf8exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.NEAS6b0d4f83143250bb130abca8f46b5bf8exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEAS6b0d4f83143250bb130abca8f46b5bf8exe_JC.exe
-
Size
64KB
-
MD5
6b0d4f83143250bb130abca8f46b5bf8
-
SHA1
ee0d32faa1379071022f452c6ccd70aae21aad75
-
SHA256
04c371c2988cb9682cf9bcb7b273ef5668719d03a8813900eebdb0efa22c18e8
-
SHA512
86e93ccfb48bb84c3ac526935301ea41de09e01d7fe18432e83900fba8b8ec2050e93f3791517efc235b5762513dbd583c220d896da5650ca52b4f73207472e0
-
SSDEEP
1536:pQ7AESksxmwGcuedkQURaNLP8mOAwR5V1iL+iALMH6:pBfxmtMkQUR0ENAwR5V1iL+9Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.NEAS6b0d4f83143250bb130abca8f46b5bf8exe_JC.exe
Files
-
NEAS.NEAS6b0d4f83143250bb130abca8f46b5bf8exe_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ