Static task
static1
Behavioral task
behavioral1
Sample
NEAS.11a5471dc183405df02521aee83d9560_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.11a5471dc183405df02521aee83d9560_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.11a5471dc183405df02521aee83d9560_JC.exe
-
Size
702KB
-
MD5
11a5471dc183405df02521aee83d9560
-
SHA1
23526142fafadba54b8ee283a1b9ae0d5e1b7f41
-
SHA256
c282c000a513443e78a6eea856a92773c53db0df652dea8a908db6a3f0d512d9
-
SHA512
76fe13f66c122b864919b5143ef9947fe8712a9a13f3034bef765c9c6f82fa3528d1d36da6a97f33ded393f478e25bb809230e020a9cd44c07df64f712d0c6dc
-
SSDEEP
12288:L9Z6ROl3DBRWUFhuhZRd56kYWxyivADGN0y4hJIZYhxheWZYRtQqpk:LX6RETBRWeEhbcsyMAD+g/UWu7u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.11a5471dc183405df02521aee83d9560_JC.exe
Files
-
NEAS.11a5471dc183405df02521aee83d9560_JC.exe.exe windows:4 windows x86
f0bed16a4ff13602210c72eef213283d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SetEntriesInAccessListW
user32
GetClipboardSequenceNumber
GetListBoxInfo
GetInputState
GetFocus
Sections
.text Size: 693KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE