Static task
static1
Behavioral task
behavioral1
Sample
NEAS.811c5455d871b6c65de69ea90db55640_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.811c5455d871b6c65de69ea90db55640_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.811c5455d871b6c65de69ea90db55640_JC.exe
-
Size
14KB
-
MD5
811c5455d871b6c65de69ea90db55640
-
SHA1
8ffe19df0aa6cde02efa8fffd5a0a4bbd1d30a8d
-
SHA256
7a6353afafc97752e88a28a4f02750302e33c9a585671dedbd180df8c5fa30b6
-
SHA512
af96f494b57718429b759d803c12460c5f5b2bd1b6e0a6b9fa258c80b757f594ce7e002aff3bbf1fde3359dd92347ce200fbfb8a11ff09789f94f6556757b284
-
SSDEEP
192:okZz3eD5mvIakHf0eMXNBYYYYYYYYYYYYYYMkiqEW4Llo2qDE045HQangngn:okZQQqH8eINbhslkDE045HXgg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.811c5455d871b6c65de69ea90db55640_JC.exe
Files
-
NEAS.811c5455d871b6c65de69ea90db55640_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ