Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a6f4261a68ed4c5296f9f46b711e55b0_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.a6f4261a68ed4c5296f9f46b711e55b0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.a6f4261a68ed4c5296f9f46b711e55b0_JC.exe
-
Size
799KB
-
MD5
a6f4261a68ed4c5296f9f46b711e55b0
-
SHA1
a1a3e76f7558368cabff9d5644c95ad77fbe07ea
-
SHA256
5e5e10aff9fe36acce56c8fc919d27b76b95b179b6b7e6b3f7b5ded81f63c768
-
SHA512
6e221488522486048c2576c1f0c02d59172cb1f94a39c9d148776ee2be05f4ef0dfd76e785d008201ac5f6ddb2f2c73bf8c9a406f64ef999bc8e9880df7702c4
-
SSDEEP
12288:AuQyqVok7dcGnrHSv1Z4Wwc52MUA2noCmxl4gyOM53Eho8Y:AuwxhH9WT209JIQ2Ec
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a6f4261a68ed4c5296f9f46b711e55b0_JC.exe
Files
-
NEAS.a6f4261a68ed4c5296f9f46b711e55b0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 668KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ