Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0b412b142b7939aaf9efc58e0ac21420_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.0b412b142b7939aaf9efc58e0ac21420_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0b412b142b7939aaf9efc58e0ac21420_JC.exe
-
Size
14KB
-
MD5
0b412b142b7939aaf9efc58e0ac21420
-
SHA1
806821eaee7f59bb547435769b99baa852d4c699
-
SHA256
eda7323a9f281d8a399d3de30d11392fa1c01e32cd90c4db30f91ec9a81ceee4
-
SHA512
faa4f9f25ab658e46faafad7406ae4303954663ebc13e5551ab6cbf26dc2b9c9dd645f4e4d3cadcf75277c53b0852f3d14486c73401d115e59d5f7af6524d12e
-
SSDEEP
192:Z8rXAg3iZ5pJslCzGIFvnXbuM645YoUkUqDE045HQ5d4w4w4w4w:ZeD3ETJslCzdnXbuDKR3DE045HAHHHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0b412b142b7939aaf9efc58e0ac21420_JC.exe
Files
-
NEAS.0b412b142b7939aaf9efc58e0ac21420_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ