Static task
static1
Behavioral task
behavioral1
Sample
NEAS.247dbd3f9f6ca694a8ff383007041f91_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.247dbd3f9f6ca694a8ff383007041f91_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.247dbd3f9f6ca694a8ff383007041f91_JC.exe
-
Size
55KB
-
MD5
247dbd3f9f6ca694a8ff383007041f91
-
SHA1
f2956657d5f16581b9b66c14489da65996caee04
-
SHA256
b819796164be520a1d5db0b9fc647955ec766c1be33d4fab3b957c9d0a5cb940
-
SHA512
9202bd9f914ae0353fb1851838a9503534fae649a5282c7dfaa58389d8a527ff75ddba066b338dce4681bb4491a9ceaad818fdf732d9e2a8ac6192e3ce747cf6
-
SSDEEP
768:/sk0x7FOqOwcY+aHv6tjiarstbhRhDU2:J0xZONGYrstbhRhD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.247dbd3f9f6ca694a8ff383007041f91_JC.exe
Files
-
NEAS.247dbd3f9f6ca694a8ff383007041f91_JC.exe.exe windows:54326 windows x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
qjbyjzby Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
jayayara Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
briazzza Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ribyqabi Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ