Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2b0f603438e78a7fa7034cb217f52230_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.2b0f603438e78a7fa7034cb217f52230_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2b0f603438e78a7fa7034cb217f52230_JC.exe
-
Size
208KB
-
MD5
2b0f603438e78a7fa7034cb217f52230
-
SHA1
6ec84089205203f92134e7426f6fe4581773ec69
-
SHA256
e63b9d5965118594f4a84d8b52df0b61f80627b718561c0c5d1fd80e530174bc
-
SHA512
3a4cd138149305aba384425436cf6f4d975313e16d13258aa451018abac82d9c983cba966e1c736ab7510bb16f4e058b589920ff5b9deefa4032bce10b5f4958
-
SSDEEP
768:n/MeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pS69kqysrD/1H5DXdnh:nUzXF8CvrJ4PBhDP35JT1Rn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2b0f603438e78a7fa7034cb217f52230_JC.exe
Files
-
NEAS.2b0f603438e78a7fa7034cb217f52230_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.3ean Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.E9Mdns0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7LWLf Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.H3G8Chy Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neYm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EY8Cg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE