Static task
static1
Behavioral task
behavioral1
Sample
NEAS.63cd0c0c2c8e9faead7a2ea5d457aa00_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.63cd0c0c2c8e9faead7a2ea5d457aa00_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.63cd0c0c2c8e9faead7a2ea5d457aa00_JC.exe
-
Size
441KB
-
MD5
63cd0c0c2c8e9faead7a2ea5d457aa00
-
SHA1
b3c3444bc0dee25c68fcf92b2a5c6628ddd4ce92
-
SHA256
46ff9dabaf9c2f533eaa2d2d10271e7cda45da71600d6f2dcf856a9af131897b
-
SHA512
08fc93b7af195157fce865797ef8eddf8b16bfa80ad2ff7fd2e04b4271aa24c1620b83027b3d49d04dadaeb606d01c141a2a4d007ab0737dca0ade09904a84da
-
SSDEEP
6144:ZeHwXUU5EYCTvaBjRjWrLJKuKnGML5NjcxFSsQLH5AO:ZyMUusvalgg5NjaFSsPO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.63cd0c0c2c8e9faead7a2ea5d457aa00_JC.exe
Files
-
NEAS.63cd0c0c2c8e9faead7a2ea5d457aa00_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 185KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE