Static task
static1
Behavioral task
behavioral1
Sample
NEAS.71532424df7ea7e53e393d50d79b8020_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.71532424df7ea7e53e393d50d79b8020_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.71532424df7ea7e53e393d50d79b8020_JC.exe
-
Size
14KB
-
MD5
71532424df7ea7e53e393d50d79b8020
-
SHA1
52f5e0f18138754cc490f3eed60da874f2212114
-
SHA256
638b6c3f36ccc62f1f25c1a921cff510b992a62dec09914c9d3541bebf3aa83e
-
SHA512
9df57d65e9bbb9f26856a90f42ae756bf50bd1b022fefd95fc7ec4669ddfb842e2c4073dc06a384d530170b9b999c685b5fc2d89d28e4f1457aa59f72cb64861
-
SSDEEP
384:yq3HvIDmlI4QGwVH8AzKlGDE045HKVVV:PVlHQTeAzKiA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.71532424df7ea7e53e393d50d79b8020_JC.exe
Files
-
NEAS.71532424df7ea7e53e393d50d79b8020_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ