Static task
static1
Behavioral task
behavioral1
Sample
NEAS.565c273abbf326abf1e12797d6340670_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.565c273abbf326abf1e12797d6340670_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.565c273abbf326abf1e12797d6340670_JC.exe
-
Size
10KB
-
MD5
565c273abbf326abf1e12797d6340670
-
SHA1
5040235772c397d1895f58dfde40ebc1034071fb
-
SHA256
05290bd72086b8a913b1c48f685885584b879f325f0e5f2f54af5cb660936981
-
SHA512
6b778f1ea1789924dc1571d797dadae56e6bcac81cb9635fc7d419ff5756ab01301cf9ed97cd2923afa36ab1d69bb195f5851fc0e75724b12aed0c974eb79836
-
SSDEEP
192:SYEHrBksub9MuIjBeMZZ3V93Vnjdwqzb3Q1ht:yclmBeMXFnhwqHQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.565c273abbf326abf1e12797d6340670_JC.exe
Files
-
NEAS.565c273abbf326abf1e12797d6340670_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ