Static task
static1
Behavioral task
behavioral1
Sample
NEAS.286d36385a00e9d84db9bbb270c56b80_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.286d36385a00e9d84db9bbb270c56b80_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.286d36385a00e9d84db9bbb270c56b80_JC.exe
-
Size
1.4MB
-
MD5
286d36385a00e9d84db9bbb270c56b80
-
SHA1
3defc5338be5732b4647fc4e3aec3f4ae891b2a4
-
SHA256
5e6913fc6a3e123dfde56f4c9c2234dabb326f27cfe59cec56cb234327c58459
-
SHA512
fbad6f21cfaa8a979401f892ad2a7331c5e202926adc276be253ef1fce3a2ae70d9b31e0027b782b337e8f3dbcf1b4a2e035a393d71104bd9e8f089ea2c6c6fc
-
SSDEEP
24576:5/T5Hq3sSPmE3Zc74FDTcdnQCw4nPxzxpvLLLLLLLLLLLLLLLLLLLLLLLLLLLLLp:5/T5pzmccBTOQCwgxz/vLLLLLLLLLLLM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.286d36385a00e9d84db9bbb270c56b80_JC.exe
Files
-
NEAS.286d36385a00e9d84db9bbb270c56b80_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 468KB - Virtual size: 465KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 696KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ