Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1a9eb79667f17b9d428dcbf2dea9fb16_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1a9eb79667f17b9d428dcbf2dea9fb16_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1a9eb79667f17b9d428dcbf2dea9fb16_JC.exe
-
Size
71KB
-
MD5
1a9eb79667f17b9d428dcbf2dea9fb16
-
SHA1
5cef0d2789bbbe0a7a0f45f0fa138b82bea88849
-
SHA256
ec920dff89c633dbd0e45351bbc4fbca3772205e041246426331165ee48e8f3e
-
SHA512
586109c086d86b31ef7ce00914281baae7a234f7da70c93b2232cbea20ad415c7b802a0fd3f91e169bb63e9e8ee84cee79cf36a8a4b1e67f336055fe37ec1c1e
-
SSDEEP
1536:/yv15vM17WAHqt8ofa3aoV6C6Ff2H7rjo1nfxtBDtpRQmDbEyRCRRRoR4Rk:/yd5017EIICeeHbo1p/Jpe4Ey032ya
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1a9eb79667f17b9d428dcbf2dea9fb16_JC.exe
Files
-
NEAS.1a9eb79667f17b9d428dcbf2dea9fb16_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ