Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b3ae9f4bd3275c0fe16058f809ab21156dcd3c83d74102ce555d22456d4f2bcbexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b3ae9f4bd3275c0fe16058f809ab21156dcd3c83d74102ce555d22456d4f2bcbexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b3ae9f4bd3275c0fe16058f809ab21156dcd3c83d74102ce555d22456d4f2bcbexe_JC.exe
-
Size
488KB
-
MD5
169c5334636189897a4ad1a1a66380ad
-
SHA1
b9210797b7cb25c3e2a0e7256e5ea6e34681bcbd
-
SHA256
b3ae9f4bd3275c0fe16058f809ab21156dcd3c83d74102ce555d22456d4f2bcb
-
SHA512
a90543f8783b7b28951f95c817dc594a0a33a68c6263131d0ea6dea4c0c4c4ff2c0fd62f577c9c64cefb867a304bd11731fff3ba2264a859dfd1bb12acc774b0
-
SSDEEP
6144:NYPVDZscn2kxYPNfgYVfcl2pvxAItLi9Wz5rNMNfIUUujZoCFjf8/jk4S4/AqzLe:NCDZscgfdVLdlN2f3oCZojVxv95swE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b3ae9f4bd3275c0fe16058f809ab21156dcd3c83d74102ce555d22456d4f2bcbexe_JC.exe
Files
-
NEAS.b3ae9f4bd3275c0fe16058f809ab21156dcd3c83d74102ce555d22456d4f2bcbexe_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 485KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ