Static task
static1
Behavioral task
behavioral1
Sample
NEAS.95f054f4f672f24108c3d71fee651610_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.95f054f4f672f24108c3d71fee651610_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.95f054f4f672f24108c3d71fee651610_JC.exe
-
Size
332KB
-
MD5
95f054f4f672f24108c3d71fee651610
-
SHA1
23f6b0f60ac0fd867cc5cff314dd0f232fe7f2b7
-
SHA256
aa1cfa17490ff32e3785f6c5f2c32000f2ecaafb1eee16803e53c39017687d4e
-
SHA512
ee180f5f1a1160e7f7bf9e6b74e9d033e03fa9cfe3ae6b274c5297117e36ad2e1145fb4523d2b2dd464b3decbf6effc1f3716b630f2e59dee22fc60419dc6e03
-
SSDEEP
6144:9rTfUHeeSKOS9ccFKk3Y9t9YnXLjyBA1+5P5itV7SFL0:9n8yN0Mr8nX3IA1iBitVsA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.95f054f4f672f24108c3d71fee651610_JC.exe
Files
-
NEAS.95f054f4f672f24108c3d71fee651610_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE