Static task
static1
Behavioral task
behavioral1
Sample
NEAS.da43e248c3366f3bb39181a6081be5b6_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.da43e248c3366f3bb39181a6081be5b6_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.da43e248c3366f3bb39181a6081be5b6_JC.exe
-
Size
71KB
-
MD5
da43e248c3366f3bb39181a6081be5b6
-
SHA1
47d0e73f9921bd15adafa0d0484519013c89695a
-
SHA256
d3bff6609d8a53c6932a118f3a99adbff1aace037c92a6d3b5732308dda54f6f
-
SHA512
12875d8599a7d0105cb052127d7f8bae19e5023f5f17a13edbdfca7530f65fc3d36322c2fb7c47c60d397a18c60e93ff5e8b870d36d4448668e20b52b40bec41
-
SSDEEP
1536:gIw6+kay33rmkMnMU5EZGGDpwRQcGDbEyRCRRRoR4Rk:guHXCqUCkedEy032ya
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.da43e248c3366f3bb39181a6081be5b6_JC.exe
Files
-
NEAS.da43e248c3366f3bb39181a6081be5b6_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ