Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ed8888ca745bed2601e5a4abe9b5b970_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.ed8888ca745bed2601e5a4abe9b5b970_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.ed8888ca745bed2601e5a4abe9b5b970_JC.exe
-
Size
564KB
-
MD5
ed8888ca745bed2601e5a4abe9b5b970
-
SHA1
c4f5944139ee55d8e5dcc154cfa99cf95bf32810
-
SHA256
c85dfcd642efabd6d3df849b6cf59cf97ba6f36018801c79e7bee5d2a04da251
-
SHA512
f47ebe6237024a63de84ce2d854a3c4031291d0bc574f79eb244aa1444785546967821c28def6f7d5b2154dfc3ea083ffa2f64e54bb2f09a70930d8708cab12e
-
SSDEEP
3072:/N8RinudiP52xx67lLdriHDoeFcFmKcUsvKwF6q2HZjU8E3Pi1eFcFmKcUsvKwF:/SkgiPA6RJPeUs4q2E3Pi1eUs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ed8888ca745bed2601e5a4abe9b5b970_JC.exe
Files
-
NEAS.ed8888ca745bed2601e5a4abe9b5b970_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PGllPZFG Size: 4KB - Virtual size: 4KB
etmQYOzq Size: 4KB - Virtual size: 4KB
NkQDFVfl Size: 4KB - Virtual size: 4KB
BzRWgoYq Size: 8KB - Virtual size: 8KB
WZWPbjOL Size: 4KB - Virtual size: 4KB
zheByWMr Size: 4KB - Virtual size: 4KB
DVisYruV Size: 12KB - Virtual size: 12KB
AlHQobmf Size: 4KB - Virtual size: 4KB
jWJDgZrN Size: 8KB - Virtual size: 8KB
ywcYPteW Size: 304KB - Virtual size: 304KB