Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3c0b03a14189a1f51fe4deb0a4aa7200_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3c0b03a14189a1f51fe4deb0a4aa7200_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.3c0b03a14189a1f51fe4deb0a4aa7200_JC.exe
-
Size
325KB
-
MD5
3c0b03a14189a1f51fe4deb0a4aa7200
-
SHA1
df8a4eedaa48250642d019036329fc9ec1f57673
-
SHA256
28886c5fc24910c34b7179e2eb987b3b3f19ecd9263d13e6cdaf453bf385ddff
-
SHA512
46f06a7eaf133236150c28cd6cc1b9eaefceecc6bf972ae75e61ea0127a29417a8c06489f45d7889662263e5ed110682a5a0f058ca1f84f830c17e552e61f317
-
SSDEEP
6144:AY+32WWluqvHpVmXWEjFJRWci+WUW20rUU5EYCTvaBju4J:DnWwvHpVmXpjJIUW2cUusvalxJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3c0b03a14189a1f51fe4deb0a4aa7200_JC.exe
Files
-
NEAS.3c0b03a14189a1f51fe4deb0a4aa7200_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HSP0 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HSP1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE