Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d96ae1046f67e5b6344fc1c4bc5e01c8_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d96ae1046f67e5b6344fc1c4bc5e01c8_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d96ae1046f67e5b6344fc1c4bc5e01c8_JC.exe
-
Size
74KB
-
MD5
d96ae1046f67e5b6344fc1c4bc5e01c8
-
SHA1
142e6998b6d14e3b80e6f8852b3d36a213a8ad50
-
SHA256
b1f4861ee2ee261d0c56227471649d1ff6d6b0553d6d5c01ad84ef65ede3ea65
-
SHA512
338b38c620b779c5cbda95bb58cd00a096287d0c984ef7cc3d40046f06744cdf597f27a5bf59e24f2ca9423a334f802dbf64a5de01d7a568045ca270d2e08b32
-
SSDEEP
768:PT1wAl5iMsSmm2tYI60qJE6pdYFOJnXNlhNDIoG6tbUrbKOmRefnYd9ZSELqAjsu:PGAEPYI60g4FSZN/F3Bw/ILjjidzrsE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d96ae1046f67e5b6344fc1c4bc5e01c8_JC.exe
Files
-
NEAS.d96ae1046f67e5b6344fc1c4bc5e01c8_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ