Static task
static1
Behavioral task
behavioral1
Sample
NEAS.04b1928b14eba8eb8c48671b5246c960_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.04b1928b14eba8eb8c48671b5246c960_JC.exe
-
Size
211KB
-
MD5
04b1928b14eba8eb8c48671b5246c960
-
SHA1
b86cc5770f3aab329ea6191cd215b1c06e9504a2
-
SHA256
5013eb876bbd41e82e4e35373472b19b12022c0a5b7c9fa2af3a9e9e5c8f2b4a
-
SHA512
4da5e0baaa1b6c3e2242d0e4401625e416f270925d915497e4030597512bf66705e991ac76aeaf34013c730fb2ee2e4b9fb4a50c313b07be8a8eb85c4eb28da8
-
SSDEEP
1536:avQBeOGtrYSSsrc93UBIfdC67m6AJiqAfg3Cip8iXAsG5R88i+:ahOm2sI93UufdC67ciffmCiiiXAE+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.04b1928b14eba8eb8c48671b5246c960_JC.exe
Files
-
NEAS.04b1928b14eba8eb8c48671b5246c960_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ