Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b6bec159ef5b7eedc4b01900b6ce0cd6_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.b6bec159ef5b7eedc4b01900b6ce0cd6_JC.exe
-
Size
65KB
-
MD5
b6bec159ef5b7eedc4b01900b6ce0cd6
-
SHA1
d83133c2a06a89d4cff80b11698f7a724d4d307a
-
SHA256
86573f459c2eccd4cb6d40a15a20c1679bd27e0f9e865f2d3df066567b1db01e
-
SHA512
562b588068ef22d8f8ad034de5165b8353ddb1becd5738bc1263f063be73a08a5624bd074d2e4608b859f5e07ab05cd55c82b94a805e8e7986a96dacc9c9bb58
-
SSDEEP
1536:mvplQxv8f//Oo/4+hkU4BK4wajzeaxYRdVNdnao0qqIuwkm/VjB:l2/V/4vwahENFXkm9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b6bec159ef5b7eedc4b01900b6ce0cd6_JC.exe
Files
-
NEAS.b6bec159ef5b7eedc4b01900b6ce0cd6_JC.exe.exe windows:4 windows x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE