Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cfc738af1b5241c2efd8b1acee7b5630_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.cfc738af1b5241c2efd8b1acee7b5630_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.cfc738af1b5241c2efd8b1acee7b5630_JC.exe
-
Size
80KB
-
MD5
cfc738af1b5241c2efd8b1acee7b5630
-
SHA1
1e23a9f7e4af242bcb4c24fd1d8ee34167e44ff6
-
SHA256
d5507925ebc920384b2cec1de24b7e26d8429cf7c9d5c4b1d2ab9a26d2ae7dc8
-
SHA512
ce3aa6b90c7cb16659c046c20a965ce9cd091a4b9b0e7be8a2de475d2de34cdb27570e5559aa9fec0a5c8d6c62ff6e6951cfe65b5ca470810ae0b7aa774f225a
-
SSDEEP
1536:5vHMoORizUPliPsm/gL16ZpQGf6MgHN+PhuLGR/11RRj3Y:RHxOMUMPsgQvRMY+PhGGR/11/I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cfc738af1b5241c2efd8b1acee7b5630_JC.exe
Files
-
NEAS.cfc738af1b5241c2efd8b1acee7b5630_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
)Hem)Hem Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
)Hem)Hem Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
)Hem)Hem Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ