Static task
static1
Behavioral task
behavioral1
Sample
NEAS.00b7cddb03f9916930ca66157f19dd80_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.00b7cddb03f9916930ca66157f19dd80_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.00b7cddb03f9916930ca66157f19dd80_JC.exe
-
Size
79KB
-
MD5
00b7cddb03f9916930ca66157f19dd80
-
SHA1
decaad3798721586f3df3d51f4b5792d70d44057
-
SHA256
d37b830dc987a15febdb578a8dfaa2c8be1daaa31d66f158a5386fdc438b3817
-
SHA512
08538b78c3e3e7678a38daa76fe86b86006bbd55f15b9f16087de52ecddb6f198ab4a7a78ea9dc6879814036b88256c5c504528ce5ebc64bb3f6f6009e950494
-
SSDEEP
1536:f9HMlaocok7dJK4Rm7mUBAMs0q4gF693F7hmE5hoUQ:f9H75dJKWohBAMs0qCY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.00b7cddb03f9916930ca66157f19dd80_JC.exe
Files
-
NEAS.00b7cddb03f9916930ca66157f19dd80_JC.exe.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 44KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 385B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ