Static task
static1
Behavioral task
behavioral1
Sample
NEAS.06f1f0643ec5a89f1c1eee0ca7c63f90_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.06f1f0643ec5a89f1c1eee0ca7c63f90_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.06f1f0643ec5a89f1c1eee0ca7c63f90_JC.exe
-
Size
303KB
-
MD5
06f1f0643ec5a89f1c1eee0ca7c63f90
-
SHA1
f06f3a580ca97b1fa284b4531a8de8eb3ec49a82
-
SHA256
452c98d775280a3e36592ff753c3d9aca4f87c72bc233d7cd7af9be5e57b0263
-
SHA512
279352997f163fe29826260bc2553254a2a310dc0f866b7544ab7e17308447e2f879bd53f6cdaff03a927d776df6620870fa0556528b238e8c0103aa3a2de2bb
-
SSDEEP
3072:7cWOtpBCtBXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB3tbQ:4WxlKgzelZNQSBQGH/CSpWqTb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.06f1f0643ec5a89f1c1eee0ca7c63f90_JC.exe
Files
-
NEAS.06f1f0643ec5a89f1c1eee0ca7c63f90_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 236KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE