Static task
static1
Behavioral task
behavioral1
Sample
NEAS.23126bcb4468d8a45d5dd962070de470_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.23126bcb4468d8a45d5dd962070de470_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.23126bcb4468d8a45d5dd962070de470_JC.exe
-
Size
366KB
-
MD5
23126bcb4468d8a45d5dd962070de470
-
SHA1
5148343270dd39557e4ac01b4d4088e01fe3675b
-
SHA256
e38b4bc6fad8b71f18cc1be3689f8c2f7e63872a6d70f7be1a7485b4fd2a8095
-
SHA512
55855b27f02b79fdce72266825498e65279642a2421f6d1e1499f21f40d39a3c838c872eda4899097cb03259fc5de1d492fcf56f75d26b0179c44b0be38b1353
-
SSDEEP
6144:9rTfUHeeSKOS9ccFKk3Y9t9Y6qZ25Bvf6ekAiTf6:9n8yN0Mr86FBvSjf6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.23126bcb4468d8a45d5dd962070de470_JC.exe
Files
-
NEAS.23126bcb4468d8a45d5dd962070de470_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE