Static task
static1
Behavioral task
behavioral1
Sample
NEAS.51c31b237e2cca63a7d282575b767ee0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.51c31b237e2cca63a7d282575b767ee0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.51c31b237e2cca63a7d282575b767ee0_JC.exe
-
Size
433KB
-
MD5
51c31b237e2cca63a7d282575b767ee0
-
SHA1
dc8111ce6caa27272f5743ea0310aeb3d38b527e
-
SHA256
2ca9f62445cecb1c3dac87bd43027e33d5a6293e6331689085094af0fff3c9b0
-
SHA512
2446e7c165d75162ac9e332e2ecd5385478bc1ad30589d022b694255b962e130a7eaef75c4d77ac5a7de2c7333aebffdbe029b8ca9826dd9ff4f04bbf157374d
-
SSDEEP
6144:Q1blKgzelZNQSBQGH/CSpWqTVmQdNs6+X7jINs6+X7j:Q4fBQGH6SfsQE6+X/l6+X/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.51c31b237e2cca63a7d282575b767ee0_JC.exe
Files
-
NEAS.51c31b237e2cca63a7d282575b767ee0_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE