Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dcb1dcdcbb536504c28ae216551032b0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dcb1dcdcbb536504c28ae216551032b0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dcb1dcdcbb536504c28ae216551032b0_JC.exe
-
Size
40KB
-
MD5
dcb1dcdcbb536504c28ae216551032b0
-
SHA1
3b585de479bb99f2ba34a3a6821f10067ee68060
-
SHA256
50a9f5f47c206765f746bc91e863ff3ef99db6abe74c754b6d1a360ade586bf4
-
SHA512
d34cde41bfa85e8c6eaeefeb409e4c8d71f1d83238a133c258566fad4807246f8de303e27ca7caa53a45ea6f386328fbef1aa9d1798d04dfb4b281f00e1a46cf
-
SSDEEP
384:L3HBDWRFRfaaaaaaMD/D/D/D/D/D/D8UvDE045H:LXBDW3mD/D/D/D/D/D/DRA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dcb1dcdcbb536504c28ae216551032b0_JC.exe
Files
-
NEAS.dcb1dcdcbb536504c28ae216551032b0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ