Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0b198d58b891a4552e332ed6f47c8280_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0b198d58b891a4552e332ed6f47c8280_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.0b198d58b891a4552e332ed6f47c8280_JC.exe
-
Size
472KB
-
MD5
0b198d58b891a4552e332ed6f47c8280
-
SHA1
e490ff439c4cbee39b2d555d3362489995e74fb6
-
SHA256
1d05608b5dd504a24d7829c473884c549d44f4f477aa92d6b53d44102cbd2a2b
-
SHA512
e8a290885da895c549ff544e7c398b2752859f72859d10da2791a9cdec1d3694bc2bd9626825764acc9e97b28328aa9b46fb47aba18af0aadc76f4624d37cb93
-
SSDEEP
3072:vQL8va4bjhxxp7HAM95tNez6HOB52YvpvQv5ijs3+0jJuvkca4ryF:vrdpHAM95tNez6HRxcj6u0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0b198d58b891a4552e332ed6f47c8280_JC.exe
Files
-
NEAS.0b198d58b891a4552e332ed6f47c8280_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE