Static task
static1
Behavioral task
behavioral1
Sample
NEAS.977c8e747df9a43f5176987b29eb5650_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.977c8e747df9a43f5176987b29eb5650_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.977c8e747df9a43f5176987b29eb5650_JC.exe
-
Size
59KB
-
MD5
977c8e747df9a43f5176987b29eb5650
-
SHA1
4fe050889b41db461567e9123d4ef14a18f629b1
-
SHA256
c6b7400680a8c1524efe1e1849e7b3c50fd07251ddc095c1a4f5db90b38b2ba9
-
SHA512
23ae2aa06c0b8355062ea4da499ac0c66d90b504759f32a9159120f78527bc1ae177d9d1b4eabb85c702fedee5aef62cf7ba54c05ad30ef768dec9d58e040fe8
-
SSDEEP
1536:CdXkE87nccOtwqsIcGIjAPdrl8LQpFk0J:uUE87cxtplAKriLW3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.977c8e747df9a43f5176987b29eb5650_JC.exe
Files
-
NEAS.977c8e747df9a43f5176987b29eb5650_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 33KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 385B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ