Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1ff22e17929610476db040b4b7458340_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.1ff22e17929610476db040b4b7458340_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1ff22e17929610476db040b4b7458340_JC.exe
-
Size
40KB
-
MD5
1ff22e17929610476db040b4b7458340
-
SHA1
3a942bef352d13c35c437570da19261c83e7c5de
-
SHA256
dc1aa60898d980bea702405f03bc8c137e2aa2fbed47b46708ac149ec3c07a51
-
SHA512
660268080705be8b487e5f996fc618bc550add45705264750d07ae992a2b1a8fb7581ed4b57bfd14852882855990e14c770503ff4d7bbd63a542e46f5c1c0b5f
-
SSDEEP
192:mMJb12icsTe189peuN5eT5eT5eT5eT5eT5eT5AzFJ3KUqDE045HQHAAAA:mMJx2gTdOEaaaaaaCH3gDE045HYAAAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1ff22e17929610476db040b4b7458340_JC.exe
Files
-
NEAS.1ff22e17929610476db040b4b7458340_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ