Static task
static1
Behavioral task
behavioral1
Sample
NEAS.NEASa94ee1fa20f2c027003ee0bef71045f2b0200eeb6511b621a599ab60f40f4b9fexeexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.NEASa94ee1fa20f2c027003ee0bef71045f2b0200eeb6511b621a599ab60f40f4b9fexeexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEASa94ee1fa20f2c027003ee0bef71045f2b0200eeb6511b621a599ab60f40f4b9fexeexe_JC.exe
-
Size
556KB
-
MD5
d024136e03d8ebebd62fcee9d9daf618
-
SHA1
cb29578824db722d595d254adb0206cac0ea126e
-
SHA256
a94ee1fa20f2c027003ee0bef71045f2b0200eeb6511b621a599ab60f40f4b9f
-
SHA512
3c7517265d7a72ee5d3d2934aeb04f76a55738049114995ed9acdbd84cee44ad5eae086f4f0a0f4d8ce5ccb547b16dbfc91168e757448ff8921a761ae9e87c71
-
SSDEEP
12288:2zfqBJGLuyX7BnmaaKWpaMtpwdSBxsgTOO+he:2T6JvC7Bmx7wdSBOgOze
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource NEAS.NEASa94ee1fa20f2c027003ee0bef71045f2b0200eeb6511b621a599ab60f40f4b9fexeexe_JC.exe
Files
-
NEAS.NEASa94ee1fa20f2c027003ee0bef71045f2b0200eeb6511b621a599ab60f40f4b9fexeexe_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 532KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ