Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4c3f6f2102bbc10ca8a0206c771bfe50_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.4c3f6f2102bbc10ca8a0206c771bfe50_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.4c3f6f2102bbc10ca8a0206c771bfe50_JC.exe
-
Size
302KB
-
MD5
4c3f6f2102bbc10ca8a0206c771bfe50
-
SHA1
c913003301f41672ec233ab36f8e3e0b99fce5af
-
SHA256
17fc701fee55a90c9f268bb10c682da9ce309f07105662204f795e68f810f3b6
-
SHA512
7b2f7c3cef3fd76bb9192ddd34df6f7c888e88573ed4c701d5be9039ffda468c1b28972990791e239efa8df67639624c6967f55329d186e4c34bece586858866
-
SSDEEP
3072:6cWOtpBCtBXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB3tTS:3WxlKgzelZNQSBQGH/CSpWqTbEmQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4c3f6f2102bbc10ca8a0206c771bfe50_JC.exe
Files
-
NEAS.4c3f6f2102bbc10ca8a0206c771bfe50_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 236KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE