Static task
static1
Behavioral task
behavioral1
Sample
NEAS.016248b44ad87eb4c76560bcb0c60bf0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.016248b44ad87eb4c76560bcb0c60bf0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.016248b44ad87eb4c76560bcb0c60bf0_JC.exe
-
Size
484KB
-
MD5
016248b44ad87eb4c76560bcb0c60bf0
-
SHA1
615d4c8268dc4b1312a241d77cb2b3ccdb045de6
-
SHA256
9e2a3b3f30c6ad2de0cfd0e9f894124041583659f60d72c2fbdeb4a60e33df49
-
SHA512
66eb7c7a16311570236bbd0350d950d7e486902e6cfc6b16c8c2996a13799ddd586ac0578392c21c7edf08b9d453532798c2c8ce0200f301e8871992459b4879
-
SSDEEP
12288:itXMzqrllX7dwqWs52hzpHq8eTi30yIQr+:iVMilX7dwqD2hQ8eTi3Ig+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.016248b44ad87eb4c76560bcb0c60bf0_JC.exe
Files
-
NEAS.016248b44ad87eb4c76560bcb0c60bf0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE