Static task
static1
Behavioral task
behavioral1
Sample
NEAS.365345fa08fb05455ae7af2550506620_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.365345fa08fb05455ae7af2550506620_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.365345fa08fb05455ae7af2550506620_JC.exe
-
Size
14KB
-
MD5
365345fa08fb05455ae7af2550506620
-
SHA1
00d4629eb052c38da522b8a7f5e2c5fc76b926b4
-
SHA256
e3a1ccbee877f176e1f54e9202fb738275cf8f78f99d5737c3f23b8c5ad174e3
-
SHA512
9d8bb8fe869ff3ec8da00e0b73af5398d4fc39536b5fc63f9ec6d9a9f2d908faf083deb005f0153fdb8da877bbb7f793b4e1bf925917e9dbfb2f5fd5c67c7808
-
SSDEEP
384:F1L5aDb0aT9V788888OAtt3DE045Hqcccc:F1UDb0aTH88888OAtdAUcccc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.365345fa08fb05455ae7af2550506620_JC.exe
Files
-
NEAS.365345fa08fb05455ae7af2550506620_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ