Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9b506a8e4186f8426e56ba8d72bf03d0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.9b506a8e4186f8426e56ba8d72bf03d0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.9b506a8e4186f8426e56ba8d72bf03d0_JC.exe
-
Size
626KB
-
MD5
9b506a8e4186f8426e56ba8d72bf03d0
-
SHA1
1388cbb646829239d155368eb1c8ecdfb41f46f8
-
SHA256
3d82f7ea603997ebd7831a8ece6d7ef17f92f01eeebf88c071473c921bd13271
-
SHA512
3b17904c8a1ff78700075ed0efcf648bc065082bc12a3255de3fdca93d8c07bc885ff5de9e80361490fe0e85bd824502618f6a43e2c3b3b0cb7d946b05efddf2
-
SSDEEP
12288:zJMxy+7SM0ZWEPZrkbYnGxRi0fIPOkUJDAboPNm46SprwfrqyorMqGz44rvVAFB1:z2wTMUBGxR6OZJAbkJn6frq5u1buOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9b506a8e4186f8426e56ba8d72bf03d0_JC.exe
Files
-
NEAS.9b506a8e4186f8426e56ba8d72bf03d0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ