Static task
static1
Behavioral task
behavioral1
Sample
NEAS.79bf7abca2933839da30ca149b5cbbf0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.79bf7abca2933839da30ca149b5cbbf0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.79bf7abca2933839da30ca149b5cbbf0_JC.exe
-
Size
14KB
-
MD5
79bf7abca2933839da30ca149b5cbbf0
-
SHA1
66ebe68cef57cd74a2a34157ce672a1d62490b56
-
SHA256
a797552224a7e06d694a063f06f397b235f15b800d68b27a224b5e812abba4e1
-
SHA512
ef55128de24cdb6b7cbcf513bfb2e85625a1ba623aede35f739b1cb0fa1ca5c7d0164a90c406b8e4f1fd8408e3a31a54bfeee98ccff2fa7d969dcba88219c385
-
SSDEEP
384:LuB6pDnzPwew94CEuNHb1YE8xEgDE045H6AAAA:LuBIUvESb+EulA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.79bf7abca2933839da30ca149b5cbbf0_JC.exe
Files
-
NEAS.79bf7abca2933839da30ca149b5cbbf0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ