Static task
static1
Behavioral task
behavioral1
Sample
NEAS.db765e3ae32dab0e207e927fa48ca963404819122f9b094908001aa4d3ee7b94exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.db765e3ae32dab0e207e927fa48ca963404819122f9b094908001aa4d3ee7b94exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.db765e3ae32dab0e207e927fa48ca963404819122f9b094908001aa4d3ee7b94exe_JC.exe
-
Size
1.1MB
-
MD5
1ac789b4d8af79035ec0392e0f1c6752
-
SHA1
a978282d918e6088a3c84b8e0351c3126b8b237c
-
SHA256
db765e3ae32dab0e207e927fa48ca963404819122f9b094908001aa4d3ee7b94
-
SHA512
b68dfcf56aa3a1cb63c1c562aedd83ae2ffec8125415458594aa886f590c4f84db0911bc5f8877cc9653d47d7c34b9a360e6c6a12a7e8aa4d7adf1cf1c9f8ccb
-
SSDEEP
12288:NF90U+ivk56Zvuqeci0wLuFvqh4lX3Gs1JAPMT6lYfT6/:L9r+isKuIsLuFU492s3APMulmTM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.db765e3ae32dab0e207e927fa48ca963404819122f9b094908001aa4d3ee7b94exe_JC.exe
Files
-
NEAS.db765e3ae32dab0e207e927fa48ca963404819122f9b094908001aa4d3ee7b94exe_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ