Static task
static1
Behavioral task
behavioral1
Sample
NEAS.138afcf35d0667cc8b92932c1f219c70_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.138afcf35d0667cc8b92932c1f219c70_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.138afcf35d0667cc8b92932c1f219c70_JC.exe
-
Size
228KB
-
MD5
138afcf35d0667cc8b92932c1f219c70
-
SHA1
c073c67ab3a01e974b18798fc844ff9837831a51
-
SHA256
0c8f63209db030ee790056d2d9445eed63ff78f098d7375a3353e80f6f99e7aa
-
SHA512
86e5c74d9195b6aa1ab933b7bbced7bff71a0835f27be8453ece61da16ba5ba1d5f815d79a54a15ae0e51e25315aa48d0e22e9c8e360bef7a6ce4660e5b6c976
-
SSDEEP
3072:nl9tvTdTfs0TbB+2rYXDq37TUKixoxudQk4zk4vvpIKSsxj6cR4Hs7WSo69IoWWm:l9tvph9rYXDqr9imxrh8eV2Hs7poam
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.138afcf35d0667cc8b92932c1f219c70_JC.exe
Files
-
NEAS.138afcf35d0667cc8b92932c1f219c70_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.dhytjk0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dhytjk1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dhytjk2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE