Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d85a9526b3eb9c38f7f5dc77ec40c9778e19939bfda294d25a365a743c4a5434exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d85a9526b3eb9c38f7f5dc77ec40c9778e19939bfda294d25a365a743c4a5434exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d85a9526b3eb9c38f7f5dc77ec40c9778e19939bfda294d25a365a743c4a5434exe_JC.exe
-
Size
496KB
-
MD5
771bb53824809e438fa9c6be25a04ca1
-
SHA1
8863a0bde8db7e563ecbcfb32207eab5f94253d2
-
SHA256
d85a9526b3eb9c38f7f5dc77ec40c9778e19939bfda294d25a365a743c4a5434
-
SHA512
0f4821fd842a232274e000e2c8409341f3db2b5c063a114d5d692ce77b13f4b97b22f7230099b6d6ed93e2ca39ab0d69393b7ac0c04955389e7d61dcadb8353b
-
SSDEEP
12288:ei1adC/4FqQ6VhmyRjcFDmE0cAfoQjcSMIBWcNYGUbrNZI4jk4eUq+IM:3ad6dNBR3c/9Rk/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d85a9526b3eb9c38f7f5dc77ec40c9778e19939bfda294d25a365a743c4a5434exe_JC.exe
Files
-
NEAS.d85a9526b3eb9c38f7f5dc77ec40c9778e19939bfda294d25a365a743c4a5434exe_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 495KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ