Static task
static1
Behavioral task
behavioral1
Sample
NEAS.13738b7b578e698f9be1e26e89681c10_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.13738b7b578e698f9be1e26e89681c10_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.13738b7b578e698f9be1e26e89681c10_JC.exe
-
Size
279KB
-
MD5
13738b7b578e698f9be1e26e89681c10
-
SHA1
67520d752e37a72e2b4b4ffacada3fc5b7d6070b
-
SHA256
ae100b4e6fa7a7c6c0f79b132c128a50e8750118effb4c526d00c76efd93de40
-
SHA512
a6ce05cbc5c4b03807979ceaa6ffb97a10025a1495479f1aca480b497a5d61b38960fd212763cdd74fa0cfc16ee2e48f7722aa13541bd0f775f88d3313f32503
-
SSDEEP
3072:R8ERv3zZZm5c4Sq+YN95wFT0z+QadjN3rOwRXENk+Y0yFNzlUu0Vn:R8EZrm55Zt5wFwz+TdpRXENFTAkVn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.13738b7b578e698f9be1e26e89681c10_JC.exe
Files
-
NEAS.13738b7b578e698f9be1e26e89681c10_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 253KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE