Static task
static1
Behavioral task
behavioral1
Sample
NEAS.85532f1e1166f1b8b1499ac93cc99e20_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.85532f1e1166f1b8b1499ac93cc99e20_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.85532f1e1166f1b8b1499ac93cc99e20_JC.exe
-
Size
82KB
-
MD5
85532f1e1166f1b8b1499ac93cc99e20
-
SHA1
94e3ec70daa0316624fb958cf4d7176a0be5a0f2
-
SHA256
04ec86cc4cde6c42a1291b81b681bd1ae15f93a9b696cd79c6382d5d8402f8bf
-
SHA512
2868be99f4b328cd551c9ca1b156f950bd4075b4d4ff4927bde0a5fac441b48700924d98ca14aa73e3e3c3a56319f5ec19e5b9729b073d98e24cdbc03cf5493f
-
SSDEEP
1536:tdFfoZe6MPMOIN5mEzTjFLW9Ovoh2ZyY0kpc4wgjNZLnqg:tdFfC1LvN5mEHjkOgEAxkpYgjJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.85532f1e1166f1b8b1499ac93cc99e20_JC.exe
Files
-
NEAS.85532f1e1166f1b8b1499ac93cc99e20_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ