Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fa432c4e155cfcf612649acd8b3d2a84_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.fa432c4e155cfcf612649acd8b3d2a84_JC.exe
-
Size
97KB
-
MD5
fa432c4e155cfcf612649acd8b3d2a84
-
SHA1
dc4fdbbc7a0e27bbb9e65069a2e2c9709cc277db
-
SHA256
093d3f39e25d94000767c0db44735a1453c3f077832c0063520f1f84569ebd40
-
SHA512
8a1257292cee7cf7e2550c0b791eef43d295b712acae6c2f37983390854a179a4d223da490da00cea5dd884200a15075e9c685e1b522a06932c3eebe5e84fc84
-
SSDEEP
1536:SU4kEIHC7BPVSowt5geLXLy6O74GycR2VmTq4:2kAVrJkTOMGRlT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fa432c4e155cfcf612649acd8b3d2a84_JC.exe
Files
-
NEAS.fa432c4e155cfcf612649acd8b3d2a84_JC.exe.exe windows:4 windows x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE