Static task
static1
Behavioral task
behavioral1
Sample
NEAS.16bbc676ac117738eb69f458fc31faa0_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.16bbc676ac117738eb69f458fc31faa0_JC.exe
-
Size
331KB
-
MD5
16bbc676ac117738eb69f458fc31faa0
-
SHA1
3286c55fe053d2ee0ec8651bbf81b4a16d2d4868
-
SHA256
367ca6af68de1b9659f8cd2157e6632d875fd5bb38a677e4a992414f34d2351b
-
SHA512
2428286dabbb5e36f508b3c843fb964161826e22da62392912233702e5057f332ce86ef2b073cc6112711fe6bd6d9a3a06fae0aaeda231b0496c807f8c75caee
-
SSDEEP
6144:2LtOexihqv4m+lXD6betiTuBMTWjIDIiUBAkW9UOKMOtzWO8CatspdFBk:2L1D+IatauBML42MykRaD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.16bbc676ac117738eb69f458fc31faa0_JC.exe
Files
-
NEAS.16bbc676ac117738eb69f458fc31faa0_JC.exe.exe windows:5 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 265KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE