Static task
static1
Behavioral task
behavioral1
Sample
NEAS.55acd4aaac562383ed4cb200648c0100_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.55acd4aaac562383ed4cb200648c0100_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.55acd4aaac562383ed4cb200648c0100_JC.exe
-
Size
4.1MB
-
MD5
55acd4aaac562383ed4cb200648c0100
-
SHA1
3d0921b7bf0585645b6dfb78e65ae3158a4b6d63
-
SHA256
2d4b030985280772292b0e074ff75c7fc4ee88947278fb5567bf3dd3e06c8f8d
-
SHA512
81bc7e3e3ec65bea6a1671d28cd99842ed98bc3a9958731da346e3088e64f564d986cb79ac3a5cf5e442d1b7202819417b09ac7054452587c3fbf192c55f04c8
-
SSDEEP
49152:/NjY2EYTb8atv1orq+pEiSDTj1VyvBaVK6khJWc8qEjLww/BxDe2XwicVBeDbsgy:FxXbIrq3K5jhcFb
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.55acd4aaac562383ed4cb200648c0100_JC.exe
Files
-
NEAS.55acd4aaac562383ed4cb200648c0100_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ