Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0de1557d73dd8511056f1f22147db290_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0de1557d73dd8511056f1f22147db290_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0de1557d73dd8511056f1f22147db290_JC.exe
-
Size
626KB
-
MD5
0de1557d73dd8511056f1f22147db290
-
SHA1
2603a6ddb3aed6d47c4b380886897d110f892051
-
SHA256
a8cded6f562537295a372ad2037bcbc4e3ac3a6cab463e6bb753dd3bd332f98f
-
SHA512
d74424fe784a551c6aeb4ce4d3f3a48d82f837fd5f347e1bae27e90a276cd4e07b486be8ffc9a2c1aaaa3e589c6d09bed00b7bc387feff81f353e2a5e071298e
-
SSDEEP
12288:4B+5sjhoYIPC2k6ZHZHTh/gCHIBib2FTdARXnCY73DGyFyw:xsIP66Z5Txg7BPFg7f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0de1557d73dd8511056f1f22147db290_JC.exe
Files
-
NEAS.0de1557d73dd8511056f1f22147db290_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
cKrwgWRk Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QCYiaatN Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE