Static task
static1
Behavioral task
behavioral1
Sample
NEAS.817ba600441efb7e5a4c22c989ba7f90_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.817ba600441efb7e5a4c22c989ba7f90_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.817ba600441efb7e5a4c22c989ba7f90_JC.exe
-
Size
14KB
-
MD5
817ba600441efb7e5a4c22c989ba7f90
-
SHA1
2eaf0a29a9e2a77d6fb0b2b2ed678e6717c3378e
-
SHA256
a887b17f50ca71dd4552052612f209da103fa9ad162136000a4dae8c906ec293
-
SHA512
ef9cf941487377b715be9ebffeee0d2f355b60fa8167d08c94cdf0284dff50714249ca1fd959cfcd7d6b0c317442fff3f14656b8358e8ddf31ee15d396da61fb
-
SSDEEP
384:3N5Td5Gz3raFFd57ZX/4kDVDE045HL2M2M2M2g:3N5Td5GzbS7hBpAJ2M2M2M2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.817ba600441efb7e5a4c22c989ba7f90_JC.exe
Files
-
NEAS.817ba600441efb7e5a4c22c989ba7f90_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ