Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8f992b4bf23ecccce410c9a0b16b28b0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.8f992b4bf23ecccce410c9a0b16b28b0_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.8f992b4bf23ecccce410c9a0b16b28b0_JC.exe
-
Size
14KB
-
MD5
8f992b4bf23ecccce410c9a0b16b28b0
-
SHA1
df03c36a7ebb6f6d16c22669ef1ccf3cba744bd4
-
SHA256
8e9c2b999e6994e4c49081d67c7f9c15656f4d4be3479e1892176900c5d0fd18
-
SHA512
afea947e7f29c1e93b89dc9680c147bba02211273c6f98f1a625d9761fbfb7a49d0ba8a6dc43901c75790cd6f2863ca62584a1afd4bb5ef59ed6ea3bcccab90e
-
SSDEEP
192:bNWM45WIBSxDZ1y2AlUsBCEi9rGo9qDE045HQeQ+zQ+zQ+zQ+zQ:b0wIB6SUshiwvDE045H3pzpzpzpz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8f992b4bf23ecccce410c9a0b16b28b0_JC.exe
Files
-
NEAS.8f992b4bf23ecccce410c9a0b16b28b0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ