Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1dd6c7f3ae1f1ac7bf26b2804c6d0d65_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1dd6c7f3ae1f1ac7bf26b2804c6d0d65_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1dd6c7f3ae1f1ac7bf26b2804c6d0d65_JC.exe
-
Size
439KB
-
MD5
1dd6c7f3ae1f1ac7bf26b2804c6d0d65
-
SHA1
af675eac85d7aeaef1e5cf1e21a46ab64243296e
-
SHA256
bb3daa3e6eef406a8b0d6cea6f33658511e8a544b1113f09642001b40c2e28ba
-
SHA512
e5de9095e6202f82463ad9fb7d491c704c46b83982e95e2585b4211aedbed87a22dd62f292e7d40983d5a24328dd2ff953047f8e9785e4d2d898ad240655c290
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJkA4AhJqwi8ICA2qClg:rqpNtb1YIp9AI4FkA4AhJqwi8ICA20
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1dd6c7f3ae1f1ac7bf26b2804c6d0d65_JC.exe
Files
-
NEAS.1dd6c7f3ae1f1ac7bf26b2804c6d0d65_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE