Static task
static1
Behavioral task
behavioral1
Sample
NEAS.14852bc0dfd157d01d2257c19ba13f80_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.14852bc0dfd157d01d2257c19ba13f80_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.14852bc0dfd157d01d2257c19ba13f80_JC.exe
-
Size
21KB
-
MD5
14852bc0dfd157d01d2257c19ba13f80
-
SHA1
8ceaf42383398bf31fa722d424ac0453e39ece07
-
SHA256
97412367bb5f16b1d415ddfb3b1ff1bb3b7e045f30a1d7b11864078c1874e905
-
SHA512
af98974e8c2d02830b331ff3add1e4bcccb92ab61812deb5df53f49f4062cb96f5224dcd1d3c5b162c888c30ca7755556d499ab0414bc3f60a84da6e7d647187
-
SSDEEP
384:jIz4MOgnXXtsUwGDF+6g8xdv/XPAo6OQW1pfkAboQZMHrjTcHU+rInB/onVcWYjn:jIUMOgnXdmGDF+6hdfAOH/8Ab+vTcHnS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.14852bc0dfd157d01d2257c19ba13f80_JC.exe
Files
-
NEAS.14852bc0dfd157d01d2257c19ba13f80_JC.exe.exe windows:4 windows x86
0c144496adf6d6951a8195019d714846
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
Sections
.text Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE