Static task
static1
Behavioral task
behavioral1
Sample
NEAS.588aeb4dc32c97ac4b74cc5b4a9a04be_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.588aeb4dc32c97ac4b74cc5b4a9a04be_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.588aeb4dc32c97ac4b74cc5b4a9a04be_JC.exe
-
Size
107KB
-
MD5
588aeb4dc32c97ac4b74cc5b4a9a04be
-
SHA1
89b5bc7a3774e7976d22dce070830a2cfcc4b96d
-
SHA256
4c0e626f1feeb0e703f5f15dd0196cd8d02ce5fed5c7d9c1af85c39fb3d2e151
-
SHA512
a82bab2e5470f5eba762f7a02f55f600a6bb83363ad53af5047bd375e3030f71752a7f884748a0fc86e7933b2f29dd34a2f27bc7d54bf26497de669c5b7e9178
-
SSDEEP
1536:7qyYvB2eN5dYeqPS9Vwe0ns5rN2LSaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:myWBHNzYmVh0ns5reSaMU7uihJ5233y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.588aeb4dc32c97ac4b74cc5b4a9a04be_JC.exe
Files
-
NEAS.588aeb4dc32c97ac4b74cc5b4a9a04be_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ