Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1179b47e4b0fdfb0d81472fcfd9497d0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1179b47e4b0fdfb0d81472fcfd9497d0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1179b47e4b0fdfb0d81472fcfd9497d0_JC.exe
-
Size
14KB
-
MD5
1179b47e4b0fdfb0d81472fcfd9497d0
-
SHA1
5b13c33997b9391b779a5f7b5c7b5ff38431b6d8
-
SHA256
8d1cb8f4adfbf18acc7e1275cf0e91d8dc7c9e03662281707567016d60638568
-
SHA512
026e6e11f1580b0a2bd02ba48b2e0398a27e2fea248d09d3c0d84772c6e8396c4a3f2ea0a58fc992cb4ef165eebdf33a87f3c1095626bfd72a2c558af812c513
-
SSDEEP
384:mNbBAQpFmHMGH8ok55555555555555HF2a3DE045H:mZeQyMGxk55555555555555s6A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1179b47e4b0fdfb0d81472fcfd9497d0_JC.exe
Files
-
NEAS.1179b47e4b0fdfb0d81472fcfd9497d0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ