Static task
static1
Behavioral task
behavioral1
Sample
NEAS.57ed7608ab0f555c6ef2c0356182e627_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.57ed7608ab0f555c6ef2c0356182e627_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.57ed7608ab0f555c6ef2c0356182e627_JC.exe
-
Size
64KB
-
MD5
57ed7608ab0f555c6ef2c0356182e627
-
SHA1
b1c81e5dd6092bc356d901bd3c593c66f4a1c3ea
-
SHA256
0f6a46efccb39f1623a4385a19d236d60c3f8acb6b4671f5cbcd6e37cd908500
-
SHA512
3d1989647c19ffc3452ac241c72f3600d6b34482033f8120ac036b0737dd3bb85dcf06c6a37a7d572c76f74728092c180f2422fb35cbc089df658d4cfd45fa74
-
SSDEEP
1536:ZjXDB8aEpVAvJMP3RO/omS6VWB0YH/HHxxxo8rlX9cXjEV1iL+iALMH6:ZfBDJiQqBLH/HHxxxo8F9sEV1iL+9Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.57ed7608ab0f555c6ef2c0356182e627_JC.exe
Files
-
NEAS.57ed7608ab0f555c6ef2c0356182e627_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ