Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0ceb9ec9d9c19e56bd01a04090707b80_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0ceb9ec9d9c19e56bd01a04090707b80_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0ceb9ec9d9c19e56bd01a04090707b80_JC.exe
-
Size
14KB
-
MD5
0ceb9ec9d9c19e56bd01a04090707b80
-
SHA1
617f4aa8b81683a7cb9b2f3dee776a4f864a9d97
-
SHA256
3d16218bea1aa04052358fe95b884b77ac77d5a0d148779e0e28b5387b60feff
-
SHA512
5ebee750f730636da1c98d0a7321784341134b8d620a15ab737841fcdf6265eeda1564ad1ad8e90a2dd43ff50bc1e0c481f8a9721ecc421cfb731a1948c4ff80
-
SSDEEP
384:7U70tmh3I5nxxgbSXcfMnwXAC4t1zhqYDE045H:7qUmpUAbSJcAH7AiA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0ceb9ec9d9c19e56bd01a04090707b80_JC.exe
Files
-
NEAS.0ceb9ec9d9c19e56bd01a04090707b80_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ