Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d865666b56d4f61bf0b6d7dfc50fe520_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.d865666b56d4f61bf0b6d7dfc50fe520_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d865666b56d4f61bf0b6d7dfc50fe520_JC.exe
-
Size
70KB
-
MD5
d865666b56d4f61bf0b6d7dfc50fe520
-
SHA1
03e4c54323bb3e0303d6794461f2bc35484efd2d
-
SHA256
af8c9e4bac285461e8be65d30d5fc864c33725d544cec250c84ad08df1905189
-
SHA512
83702436279a5a6745f06124242b859e46728ba73d0aa06072ea5d32343b3635d5b0f11c8ca33cb3acdb34eb473d2bd0a75d6f08fdd2fc01f7a1553a51e3dc5a
-
SSDEEP
1536:Mq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9b1YTjipvF2a:Mq5ud9qHFO8Kf3rIIb1YvQd2a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d865666b56d4f61bf0b6d7dfc50fe520_JC.exe
Files
-
NEAS.d865666b56d4f61bf0b6d7dfc50fe520_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
l625upyp Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4wb9dilb Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
470cgalz Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE