Static task
static1
Behavioral task
behavioral1
Sample
NEAS.01d7e8512f2cd3982f9b86abd9e987b0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.01d7e8512f2cd3982f9b86abd9e987b0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.01d7e8512f2cd3982f9b86abd9e987b0_JC.exe
-
Size
109KB
-
MD5
01d7e8512f2cd3982f9b86abd9e987b0
-
SHA1
c167929db60229417e45ec1e872642dfd9ab87cd
-
SHA256
4aed205baf5b100a23eba6edbc9343cddb04e5c8b072fb87d6a0a9fac5272ec3
-
SHA512
aef8329eea785a68af8b5575f30c057fbf94dc9c680801d909ae8114f5b116ac427f750b97c16ce43cd09c27edc02f3809b0dbb90c29e7e95f7f28f8c31553d2
-
SSDEEP
3072:UKeTS4U4SvCnFURk62fOvuuWF7pzqqagp7vK:jb48vCyRk62fOvuJFNqkK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.01d7e8512f2cd3982f9b86abd9e987b0_JC.exe
Files
-
NEAS.01d7e8512f2cd3982f9b86abd9e987b0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ