Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c5b3639945a56fc4eea12544b8a692d0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.c5b3639945a56fc4eea12544b8a692d0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c5b3639945a56fc4eea12544b8a692d0_JC.exe
-
Size
40KB
-
MD5
c5b3639945a56fc4eea12544b8a692d0
-
SHA1
ae21d0625094b16fe548626036e31127044acbbe
-
SHA256
204b620b180865d48b73affea0f8dc9e5cae9c23b84617754adcf53c3c09653a
-
SHA512
de6a7fde5d0b06a55f66e783685f74939b9785d16543a7058826715b4ca0212ce2f2f8cd758a676b929ca7f602380196ef03f9989c5a794f1e30bb5f18e39920
-
SSDEEP
384:LaRYhDPlTT3pEeDGkDIkDIkDIkDIkDIzppppphH3DE045H:LaRUdBEeDGkMkMkMkMkMzpppppdA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c5b3639945a56fc4eea12544b8a692d0_JC.exe
Files
-
NEAS.c5b3639945a56fc4eea12544b8a692d0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ