Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4f40f6f840d8b58d0b9dfcd6226dcd40_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.4f40f6f840d8b58d0b9dfcd6226dcd40_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.4f40f6f840d8b58d0b9dfcd6226dcd40_JC.exe
-
Size
522KB
-
MD5
4f40f6f840d8b58d0b9dfcd6226dcd40
-
SHA1
116e4ce52f60e16d5623337fbd3ca45305a28e21
-
SHA256
0ca2bd4d16fbe09a9b31ffd64050283df1c5de803851e6107568fcceb4c7ae63
-
SHA512
a856ea31582352217c27c40fc9e35618382c70e22c0b18349dba4fbb90ad2f13212eca5610255e32d0ac72c712b25e4c2cbeee6bb4f7cb215b5702531246dc04
-
SSDEEP
12288:goaTqEuc+ivM4SR5TNmN+yQ4YRUxREqjtTBw0dPjFRQdVgDtRFOUE29aC:goOu94SzTN/QY6xTBF2detT9aC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4f40f6f840d8b58d0b9dfcd6226dcd40_JC.exe
Files
-
NEAS.4f40f6f840d8b58d0b9dfcd6226dcd40_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
EPE0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPE1 Size: 514KB - Virtual size: 514KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE