Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6abd658a63064652fd1ee34de2f20cf0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6abd658a63064652fd1ee34de2f20cf0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.6abd658a63064652fd1ee34de2f20cf0_JC.exe
-
Size
80KB
-
MD5
6abd658a63064652fd1ee34de2f20cf0
-
SHA1
a9f7399d9d877ef3c95b00adb2a0b951f021bc7a
-
SHA256
ec012ab0ebe58e75df99ea400c825ae6c5e9f740077c477572a6624cfa478015
-
SHA512
d6502e23c63f3217029f18ef0ca52e88169cac78ff269bda301da640988c243f9c09e1a9d56a13046e0a0e80c2f48972271d28174b8ccb6b61f5b7ef4abc9df4
-
SSDEEP
1536:6asQx7dBLwhrkISRd2u+nlB2p8yBVejX1eYS:6a4kvd2uA/A7BVejXMYS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6abd658a63064652fd1ee34de2f20cf0_JC.exe
Files
-
NEAS.6abd658a63064652fd1ee34de2f20cf0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE