Static task
static1
Behavioral task
behavioral1
Sample
NEAS.NEAS3801b5cc51eb496e8a36c924fa55af83exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.NEAS3801b5cc51eb496e8a36c924fa55af83exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEAS3801b5cc51eb496e8a36c924fa55af83exe_JC.exe
-
Size
213KB
-
MD5
3801b5cc51eb496e8a36c924fa55af83
-
SHA1
02dbe7f17a3f376cff6b243e2e9b99c848cfe6ad
-
SHA256
acc0ae07485831424745e8a022779557f8130c10217da132de10de417dbd5223
-
SHA512
6b20d4bdb3d731c517719817bb87aab14daf8335aec1e8b82d4bf18cd6546420da8690ca13ce83033d9c2f733f40287c16cc16b3715be13288d96d35618e9961
-
SSDEEP
6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2x:Zv1nWdQP1EDhZPx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.NEAS3801b5cc51eb496e8a36c924fa55af83exe_JC.exe
Files
-
NEAS.NEAS3801b5cc51eb496e8a36c924fa55af83exe_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
GVD0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GVD1 Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE