Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6d13016d475f09bddac04624aff195d8_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6d13016d475f09bddac04624aff195d8_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6d13016d475f09bddac04624aff195d8_JC.exe
-
Size
59KB
-
MD5
6d13016d475f09bddac04624aff195d8
-
SHA1
0f87635385f7c9597628e9d0ad091d5271a0a023
-
SHA256
cba2582f11b6d8d5aac8d9b06d4bb60a67f37095eeb89e3d175b131a90895023
-
SHA512
b37ad51300cc42f09ccbb302103b43046ea1d39affe2cf45e72b0c889136e69890ef12e4b7ad3f4b40e5b587e11eb83c23fe58cb1a5ee1da6cd0cbe4338bffee
-
SSDEEP
768:XoNK2cNW0QbRsWjcd+6yBFLqJ4Z8qx70RM8/O/B2ZZcLRAeot:KcNjQlsWjcd+xzl7SMQ2Aeot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6d13016d475f09bddac04624aff195d8_JC.exe
Files
-
NEAS.6d13016d475f09bddac04624aff195d8_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ