Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d0cc7a20664a86f1b4f259b13bac4a20_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.d0cc7a20664a86f1b4f259b13bac4a20_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d0cc7a20664a86f1b4f259b13bac4a20_JC.exe
-
Size
14KB
-
MD5
d0cc7a20664a86f1b4f259b13bac4a20
-
SHA1
b1c89f6e8a6619359f9e8681d65ddb745bf1c3d2
-
SHA256
7a39cb5e673329deadc33bcc1f9c7471cc9f2072fcf1e6a00f116848e682f615
-
SHA512
442fe23956d664cb9d0d9ccc29312f03938fec9dc8d4b3fc1d7bb7e3ff53a089a50df3da9d39ef8c634e3be6484722a8a7eedddbc6dd3b9ac5851cc9a6759a53
-
SSDEEP
384:PzSsYn16a1X8oaaaaE+sXDE045HnfFfFfFfFf:/Y16anWA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d0cc7a20664a86f1b4f259b13bac4a20_JC.exe
Files
-
NEAS.d0cc7a20664a86f1b4f259b13bac4a20_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ