Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b19a8c42a03e4167e47e6187fae706f0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b19a8c42a03e4167e47e6187fae706f0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.b19a8c42a03e4167e47e6187fae706f0_JC.exe
-
Size
14KB
-
MD5
b19a8c42a03e4167e47e6187fae706f0
-
SHA1
9ee985c82d4d073e0df8a5b60399ea02ac643d5d
-
SHA256
7599aa14dbb22b16fda44cc239b6ef8ceaa5c52514ab257a7ac41e2e7348ec49
-
SHA512
9a65299625d93de9ba0e13645a2a61ef52bd3b5a6599fd45529420bfa4938c86be8f54d58e2f2006fa3d63d18f62fb0acd265deeb673b0a5e87455afb78b02fe
-
SSDEEP
384:yd3EpAGKgNapccFPo6oDCcuwxODE045H:YXgNapVPo6E1xkA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b19a8c42a03e4167e47e6187fae706f0_JC.exe
Files
-
NEAS.b19a8c42a03e4167e47e6187fae706f0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ