Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e3de28d29cc91ce4c78ada2e91ff3cd0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e3de28d29cc91ce4c78ada2e91ff3cd0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e3de28d29cc91ce4c78ada2e91ff3cd0_JC.exe
-
Size
208KB
-
MD5
e3de28d29cc91ce4c78ada2e91ff3cd0
-
SHA1
b7a94ee64026a7b8402a0b24e204fe70cc6f65be
-
SHA256
e715ea47dc7b0fde8a3ce324a6c92687a5c91a55a6a6f38f0959432085face6b
-
SHA512
417c170f404e4de8827a95845c26dfd7ab68eabcccdc4e9c80fd182fd79ffaffefc8356920f2953aeb220ae22f0732ab30f41a5da860ced55e8512f314d628b6
-
SSDEEP
768:rj5JERneK1STDy+XhkwBGEEcFqassqp2h7Gin9HL12dLt/1H5rXdnh:rkRP5EE+ds5inF1Yr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e3de28d29cc91ce4c78ada2e91ff3cd0_JC.exe
Files
-
NEAS.e3de28d29cc91ce4c78ada2e91ff3cd0_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE