Static task
static1
Behavioral task
behavioral1
Sample
NEAS.01aa259062a083d986e3a96f48d865a0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.01aa259062a083d986e3a96f48d865a0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.01aa259062a083d986e3a96f48d865a0_JC.exe
-
Size
434KB
-
MD5
01aa259062a083d986e3a96f48d865a0
-
SHA1
54f6c935b9616591b668ad0c94def77ea24f991e
-
SHA256
0c43ba2c8e48ff0811fda9322dc75d01d66598163427071293997bfe8e0072bf
-
SHA512
5b63d113f21bd8c3456f181ffce3cb2a1eba664b4175b12283774bd6c1e78aef3d49f0668a6efb65d4597a62315abf88eb6dbbfa9323d6885169f622aefbb67c
-
SSDEEP
12288:lmuc9MHPMFzNYtktAEj8yImVrDV1mjy9MVBMM:lCK+h4fEj8yIynmjy8Bh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.01aa259062a083d986e3a96f48d865a0_JC.exe
Files
-
NEAS.01aa259062a083d986e3a96f48d865a0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oli Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE