Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0d4c558227b6322a33274141146ff1e0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0d4c558227b6322a33274141146ff1e0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0d4c558227b6322a33274141146ff1e0_JC.exe
-
Size
14KB
-
MD5
0d4c558227b6322a33274141146ff1e0
-
SHA1
778649d164ebb6206e666f5d3373dd8a0e84256b
-
SHA256
51657fb4e7d706626d6fa43c2dc6f8db034526b2db279646c96cc88aa3641cd7
-
SHA512
9d40f4ee05f2599225b277d286cd51a331d4c44cb1f3e301de1f01d0e537b21918a15feb18d03b8dd068895d0448fe9e6c6594a7afb356afe757bbff945a6fcc
-
SSDEEP
384:IhrZ+6bvppppppppppppptfNNrnDE045HpVVVQ:Iht5bTDA3VVVQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0d4c558227b6322a33274141146ff1e0_JC.exe
Files
-
NEAS.0d4c558227b6322a33274141146ff1e0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ