Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c61dd4760f4fb214852fe92d16bad650_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c61dd4760f4fb214852fe92d16bad650_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c61dd4760f4fb214852fe92d16bad650_JC.exe
-
Size
14KB
-
MD5
c61dd4760f4fb214852fe92d16bad650
-
SHA1
914757b48406b95cc46f7d39e92810604f8d3223
-
SHA256
4aaa7b08d95ac90feb60293ce42247e70c1df0eb0b97fd4ca8e43f3cab3863f9
-
SHA512
372738c830677d6f701a62202a258a1dfeff4206f8fc9cb3391fb9d8273e6401f9e5e9a21eda8549875628550c333d916ff828b924875786ee07fc4d5ba3f47d
-
SSDEEP
192:+JTVwZh5eq+All+l009gwRRRRRRePnKPLNb0VcdAiVcdAiVcdAiVcdAiVcdAiVcG:+JhMqHP69nwQMMMMM/DodDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c61dd4760f4fb214852fe92d16bad650_JC.exe
Files
-
NEAS.c61dd4760f4fb214852fe92d16bad650_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ