Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e2108e0759e5d38177bc5edc8be69b20_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e2108e0759e5d38177bc5edc8be69b20_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e2108e0759e5d38177bc5edc8be69b20_JC.exe
-
Size
29KB
-
MD5
e2108e0759e5d38177bc5edc8be69b20
-
SHA1
1381fa6b62b3d382da2a90ceb1a225e51703a4e2
-
SHA256
6f629330c3ca58f5a7c173929e5aa5cd093408ce82cc82555f6fdc1d1ecd7383
-
SHA512
baf7067bc74a2531d74888ddd7188ec2c93ef4e959ad9a71b547302504ea872071790a40bfffdf76e59c7ff4516b66ec82b703a1c1aa0a2c604d6b5d783a26a7
-
SSDEEP
768:3udicQWcPogVUUPl+snVV8Wi1CHuO15IgYvAE1F0VmG:3AXQPogmUPssnV+tvOsgYY+0VmG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e2108e0759e5d38177bc5edc8be69b20_JC.exe
Files
-
NEAS.e2108e0759e5d38177bc5edc8be69b20_JC.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 24KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE