Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3b2c2f8e2364c5aae30ed0fc367d2a60_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3b2c2f8e2364c5aae30ed0fc367d2a60_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.3b2c2f8e2364c5aae30ed0fc367d2a60_JC.exe
-
Size
40KB
-
MD5
3b2c2f8e2364c5aae30ed0fc367d2a60
-
SHA1
b1b22fdb0ac8921dbee150421d9eb7540465afdc
-
SHA256
6ac8cf1516f84d11c5a6772d875c18d665d5d8ff7bae368af2ac5e353eed4054
-
SHA512
6b213cc7d2e3bf1af8e46a0305f2d1f03ba7b3e13668fc554253ac1e8e8d6130445b67faf2c8dc6bdd0797edd24659158d6e88b1f98e9ca91a7b57561173fe21
-
SSDEEP
384:qxyCJKaKPgTPVVVVVVVVVVVVVVq4o9NDE045HeERERER:gJPWgTPVVVVVVVVVVVVVVq4oPA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3b2c2f8e2364c5aae30ed0fc367d2a60_JC.exe
Files
-
NEAS.3b2c2f8e2364c5aae30ed0fc367d2a60_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ