Static task
static1
Behavioral task
behavioral1
Sample
NEAS.24fe94e15f43dcebbd94c11d5ef2dbb0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.24fe94e15f43dcebbd94c11d5ef2dbb0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.24fe94e15f43dcebbd94c11d5ef2dbb0_JC.exe
-
Size
10KB
-
MD5
24fe94e15f43dcebbd94c11d5ef2dbb0
-
SHA1
6a3e2246b02da47116ba8609be17eedee0a55390
-
SHA256
e2f36764d6fb660a119cf4ac0d509a3fe70d71fab0fa4f89f89e7bf6437f1076
-
SHA512
33ad91b7e234790a5c6bf4a15528bb094893117a99fc96de93a6802f88fe8fdc16de9d8d17d409ea5f3e5a56f6d44e30dc0b1006bd903ce51b803c087f0710f7
-
SSDEEP
192:nbiqIXsP18touF3lcfFf5yqGfHLSX9GPW:biqis9QlcffyqIeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.24fe94e15f43dcebbd94c11d5ef2dbb0_JC.exe
Files
-
NEAS.24fe94e15f43dcebbd94c11d5ef2dbb0_JC.exe.exe windows:1 windows x86
e82dd51b077167be63c004bed23d0c1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE