Static task
static1
Behavioral task
behavioral1
Sample
NEAS.00c831aedf2732ce023b98570acfd460_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.00c831aedf2732ce023b98570acfd460_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.00c831aedf2732ce023b98570acfd460_JC.exe
-
Size
352KB
-
MD5
00c831aedf2732ce023b98570acfd460
-
SHA1
1315949fdf6539bf906f153a8eaea52b4df885a1
-
SHA256
da9416c4898b249a343aba683f0d2a49d1f22eb0ad21f455d945e6baa429447f
-
SHA512
664f5937e4eff79cb7d9b65acf9b394f35ddccebccdc6adfc7ab3f455e1b2612c3becbb899ee026f7ff61aacdede7abb2fc0de62c55309adff16705998f9c92b
-
SSDEEP
6144:9rTfUHeeSKOS9ccFKk3Y9t9YYO3Gqsxu7iUZdCU7j7c2:9n8yN0Mr8YO3zheA0U7j42
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.00c831aedf2732ce023b98570acfd460_JC.exe
Files
-
NEAS.00c831aedf2732ce023b98570acfd460_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE