Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1b49d89de5414d8d5d0a17d38957af80_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.1b49d89de5414d8d5d0a17d38957af80_JC.exe
-
Size
262KB
-
MD5
1b49d89de5414d8d5d0a17d38957af80
-
SHA1
bf212ddabfc3937e16425e30b1913fd1577f1419
-
SHA256
1d1816a88fdc2a8a4be76aacbcca72602f46a89a510435fff65f439d04880709
-
SHA512
5836bd6987355d05676f02c4408d2740db79a34169047f241e0add10d931774703e7839c054cc4a0166f966c5a295a9c41bf5f848a689164bf363f2d54eeab9e
-
SSDEEP
6144:n3C9BRo7tvnJ9WagKovp6dcg7BRTP+QvmDULou7:n3C9ytvnea7k6dcg7LT2Qv3L/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1b49d89de5414d8d5d0a17d38957af80_JC.exe
Files
-
NEAS.1b49d89de5414d8d5d0a17d38957af80_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ