Static task
static1
Behavioral task
behavioral1
Sample
NEAS.29b23b45bbe02bff88d718bbc5fd3130d0da0801507fcf4697de838f12a3301eexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.29b23b45bbe02bff88d718bbc5fd3130d0da0801507fcf4697de838f12a3301eexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.29b23b45bbe02bff88d718bbc5fd3130d0da0801507fcf4697de838f12a3301eexe_JC.exe
-
Size
608KB
-
MD5
fce59338a8d3c0f8a231f96eaa0b63b0
-
SHA1
e0add5d8aab35e577ce1389d92f9f8e1a79b422c
-
SHA256
29b23b45bbe02bff88d718bbc5fd3130d0da0801507fcf4697de838f12a3301e
-
SHA512
bf2ae952fa880c8414eef2118f614cb18a6c3b06a48fc350fa7fd029c8a76c675c9c5d192a943b82c5027c9c5db7c115bf1ccc73ebac8b8d55cdc72e02fc5577
-
SSDEEP
12288:OtCvo0bw+cGfQEMQ06WpIvlbjoW1VkosSbiFNdGSBMp8RHc9eJpZgi+xJjc:OtCvo0s+TfJM16iIvVoWfr8N2D9u7+vw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.29b23b45bbe02bff88d718bbc5fd3130d0da0801507fcf4697de838f12a3301eexe_JC.exe
Files
-
NEAS.29b23b45bbe02bff88d718bbc5fd3130d0da0801507fcf4697de838f12a3301eexe_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 599KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ