Static task
static1
Behavioral task
behavioral1
Sample
NEAS.81232334e956f3835b6895f89c80db70_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.81232334e956f3835b6895f89c80db70_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.81232334e956f3835b6895f89c80db70_JC.exe
-
Size
1.9MB
-
MD5
81232334e956f3835b6895f89c80db70
-
SHA1
ef807520e33f7860bdc5a55f965c48d3d7805366
-
SHA256
196a3dbcae38d8fb148061af10c239941a81662cda5584958ff968f24392f5cd
-
SHA512
94698e9fce85fbc78b57008917a8630dddd33d69f2fb7cc91b88b60f43df1d050797d399989f363ec6a8cdcdf748496dff8c72d6936733fd1785063c6183de15
-
SSDEEP
49152:yFFxWRjb6BpAco3l4bWyoKrr19aEO2/7MSt742KjL/6:yLxWVb6BpAp3l4yyVx9f/73U2I2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.81232334e956f3835b6895f89c80db70_JC.exe
Files
-
NEAS.81232334e956f3835b6895f89c80db70_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ