Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1d30e9a0b485aeb52d4b0826f6e781f0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1d30e9a0b485aeb52d4b0826f6e781f0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1d30e9a0b485aeb52d4b0826f6e781f0_JC.exe
-
Size
14KB
-
MD5
1d30e9a0b485aeb52d4b0826f6e781f0
-
SHA1
f3edf6deb9baae006bb356dfd39bf9d835718e8a
-
SHA256
b98ed3efa70d7524f6328936628bc589bd03f105c1fd118da24e778586983316
-
SHA512
e53d741c46d170bf2c5e9ebdde7e1962b440ac2e7b08320a32369892b15f8bb8b8d6fe1a566eb5141a40b24e7072d41e152dcca0a665e8bc9cba65cd52e1ca57
-
SSDEEP
384:lr/GKeYzrTw83rJJJJJJJJJJJJJJrW07UDE045H:xGKeYzrTw8vW+uA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1d30e9a0b485aeb52d4b0826f6e781f0_JC.exe
Files
-
NEAS.1d30e9a0b485aeb52d4b0826f6e781f0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ