Static task
static1
Behavioral task
behavioral1
Sample
NEAS.NEASb3349d03cfaa75d7bb51559f9a77f51aexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.NEASb3349d03cfaa75d7bb51559f9a77f51aexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEASb3349d03cfaa75d7bb51559f9a77f51aexe_JC.exe
-
Size
266KB
-
MD5
b3349d03cfaa75d7bb51559f9a77f51a
-
SHA1
f22bdfd2c1d1df255e35570168e581eacb2feeca
-
SHA256
71d1e2831ae41a072ded7fc4f646d5fc801bd6747598003be656acd90813dee8
-
SHA512
f4a10b6992de5cf6955929582305205d26e0a367ebb9f283f4e95068f6323daef293624aab039c95870faec10bed302e0379c3260f858fec022e01214eedea8d
-
SSDEEP
6144:CnfIznILPlXa70w32xxMf9aYDQRJH7HQExv38r/mmFh0txT:6AIRaotCD032/VYn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.NEASb3349d03cfaa75d7bb51559f9a77f51aexe_JC.exe
Files
-
NEAS.NEASb3349d03cfaa75d7bb51559f9a77f51aexe_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yzPzORmq Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGOqOPny Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��{� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE