Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3fbabf2cbf6265a93ca4e54788883b10_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.3fbabf2cbf6265a93ca4e54788883b10_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.3fbabf2cbf6265a93ca4e54788883b10_JC.exe
-
Size
326KB
-
MD5
3fbabf2cbf6265a93ca4e54788883b10
-
SHA1
2531e9975a06c8f5f288600b1b975975789e6bd5
-
SHA256
6cea4666a4911442b600b39a0d1cd8779951eb622bf35a66dc5742ed79f7a2ef
-
SHA512
7b99e53f3dc71c65d296b79aaa13c3b2b6031593bf037552d4b860460068ef3e2b2f67771301f02d288a0ba7543da16800ad3e72f5bab797e215de8d3efa9a6d
-
SSDEEP
3072:/plLir2bgbHfeEMlUVZ/VGS7rN+kout8GXoYloDkldTGAJOcpQzzQQz29a3nNUL5:/pW2bgbbV28okoS1oWMkdlZQ5iinNU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3fbabf2cbf6265a93ca4e54788883b10_JC.exe
Files
-
NEAS.3fbabf2cbf6265a93ca4e54788883b10_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ