Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6abcb56814084566f3ea8e40b90a7b50_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6abcb56814084566f3ea8e40b90a7b50_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6abcb56814084566f3ea8e40b90a7b50_JC.exe
-
Size
14KB
-
MD5
6abcb56814084566f3ea8e40b90a7b50
-
SHA1
bd105fc240b4a8d8e660b0eef7f37cad5a3f76b9
-
SHA256
bf8861da352b0e88c73161c665e05e09453857f477e8ce694b9ff0b93248c46c
-
SHA512
5db01b55851b749fdee12b378380e7a9b8a00ac6638fc310d5c4489c20313b146e3e4a5ccdc44b7647c808d352836ce042f8d6da40144246d5980152d618f4af
-
SSDEEP
384:ZsJgOwthncG8CBp8c1w5dB6tpFDE045HUZrZrZrZr:OJJw3Pj8+wwzFAGZrZrZrZr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6abcb56814084566f3ea8e40b90a7b50_JC.exe
Files
-
NEAS.6abcb56814084566f3ea8e40b90a7b50_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ