Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1d1bad6a5d17d1fc8596b64c7d76a980_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1d1bad6a5d17d1fc8596b64c7d76a980_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1d1bad6a5d17d1fc8596b64c7d76a980_JC.exe
-
Size
9KB
-
MD5
1d1bad6a5d17d1fc8596b64c7d76a980
-
SHA1
83c1ecbada5011887bd34e00ebd1437a1be7d0df
-
SHA256
0d7b3a2a545ee1c4f9a368378dce043a82df7112e20539be0011f60bc5c6ca71
-
SHA512
0e5852b334ac484d30cc7db7d006cb9f22dcad5f7c1d7be40bd3859b8454b697734065d95d077f28646c73b8c3703e65746f95686615e8772334015dd0a3f5de
-
SSDEEP
192:RzfkT4qewZPOLHLhLcIk68TphLgLzcX3i0yzPWeSOB:RzfkTDepLHLhLc3FTnLgLgXS0ybWr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1d1bad6a5d17d1fc8596b64c7d76a980_JC.exe
Files
-
NEAS.1d1bad6a5d17d1fc8596b64c7d76a980_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ