Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1683a04693351ee172c2861029cc6a10_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1683a04693351ee172c2861029cc6a10_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1683a04693351ee172c2861029cc6a10_JC.exe
-
Size
752KB
-
MD5
1683a04693351ee172c2861029cc6a10
-
SHA1
ae0e4c784a304b4e633f4da30e617cc88577f29c
-
SHA256
3491ea799f7d0674b9347f22a4dc74c7c8cace09ed6cf14eda314b8016aa0beb
-
SHA512
4e937bfab647b6252ce91f8a2d085c3f5a88ac6173fb8b59a1505e0e56f80fdeddc6ae95cae15e167c84b5cfe9a76756247ce3b1dca629a98b18e7c5e5801a9f
-
SSDEEP
12288:5FfyGoqTYPTURmgXSMXOv99srXeys7y1svpUgG/bDHGaSFmk5hdW:5dD2dDkoy1svDGjSaSHndW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1683a04693351ee172c2861029cc6a10_JC.exe
Files
-
NEAS.1683a04693351ee172c2861029cc6a10_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 396KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 228KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tqn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE