Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f166295d3684b2cea9d264cf4d063d40_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.f166295d3684b2cea9d264cf4d063d40_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.f166295d3684b2cea9d264cf4d063d40_JC.exe
-
Size
168KB
-
MD5
f166295d3684b2cea9d264cf4d063d40
-
SHA1
d9cbc5aecd8c83cdbfc75504b91d78cb5e253ab0
-
SHA256
bbe60cd1f304d5ee11a12b25fdf3512a3db9901d6966e08115cc4719ff8024be
-
SHA512
ae44340440ef11b63bc77093a0af227a4e4b38b39cc49160152a34f1fab408dbc1a325403b474af10b85effafc1c6db0c72f852d0756ec050d50130c0d55f2c4
-
SSDEEP
3072:CDTzVMfMIbIaw3J9h/pl3ZUx0+BC3K5eqU+BC3K5eqYroGheK4ro2Y:CDKfMmMr/plWxUK70K7OP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f166295d3684b2cea9d264cf4d063d40_JC.exe
Files
-
NEAS.f166295d3684b2cea9d264cf4d063d40_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 792B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc2 Size: 327B - Virtual size: 327B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE