Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b68a4ac3cc7917dfaa28ef9e697655b0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b68a4ac3cc7917dfaa28ef9e697655b0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b68a4ac3cc7917dfaa28ef9e697655b0_JC.exe
-
Size
80KB
-
MD5
b68a4ac3cc7917dfaa28ef9e697655b0
-
SHA1
961bf411781aa5cd99ba882650f5381e45823c5c
-
SHA256
1053c1ddec6bf4546cff70af8758d295d3654bc05408b4f10f5a58078252fee8
-
SHA512
6323cf6d151cd0bf43b3dde9d4664422901dda0d59dc655ecaf7082f7c379db39b261ec814196701d503c76f64a4a66c410a2398e4e2c3b0291d4a87791d5e4f
-
SSDEEP
1536:7mpLeICAsvW2++ijLR9pERojCJO7dOOj+m:MLldsvWL+6V9pgojCJO7dOOKm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b68a4ac3cc7917dfaa28ef9e697655b0_JC.exe
Files
-
NEAS.b68a4ac3cc7917dfaa28ef9e697655b0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE