Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bb3829aa883c29e388284a760c89ccd0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.bb3829aa883c29e388284a760c89ccd0_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.bb3829aa883c29e388284a760c89ccd0_JC.exe
-
Size
40KB
-
MD5
bb3829aa883c29e388284a760c89ccd0
-
SHA1
e340211323affa128b84e011287eeaecd11c6e59
-
SHA256
aa5eeb9b00105660453ef406d84ffbe3f0f53f645966056e17fe2aa3b9b3f121
-
SHA512
162e37d63841470b86a4dc2c51ae51e187cde6d671b8be4aaa153f8b8a8cabc3479b269e14596c148a4c46f25f3ef6f56b595ca2e7403d7081ed00f5c79f1979
-
SSDEEP
384:iVE5COqe2wEbrxmWvwREtD+AW/xDE045Hf44jV5:iVEkJeT2rxLdf2A144J5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bb3829aa883c29e388284a760c89ccd0_JC.exe
Files
-
NEAS.bb3829aa883c29e388284a760c89ccd0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ