Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ae73d5d569ce0096900057dcea037a46_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.ae73d5d569ce0096900057dcea037a46_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.ae73d5d569ce0096900057dcea037a46_JC.exe
-
Size
387KB
-
MD5
ae73d5d569ce0096900057dcea037a46
-
SHA1
eca059df4afc373ba77bd10e63acd20a5c741777
-
SHA256
1d2a9b2ae1ca557fcedf03b279f17415123599255e1599037a1814479eccabb7
-
SHA512
a5396404f82c20f91803435a79f4d29c1791889de1d1af8c91aabaa1f26a980882929ca8d64125f6ab6cf59c88c0b5ddd0c0897343be1fdae44800d99f30eabe
-
SSDEEP
12288:3Y6mMyF1raIs8XheouovrDDscHAFHHBPcIlY:ryXrmj4PtAFHGIy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ae73d5d569ce0096900057dcea037a46_JC.exe
Files
-
NEAS.ae73d5d569ce0096900057dcea037a46_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 320KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE