Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0efc8e4e92a0de2cb72a04eb2dbd4200_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0efc8e4e92a0de2cb72a04eb2dbd4200_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.0efc8e4e92a0de2cb72a04eb2dbd4200_JC.exe
-
Size
472KB
-
MD5
0efc8e4e92a0de2cb72a04eb2dbd4200
-
SHA1
8f4e37fb8cafcd71d4a8a021efd4bd887605debf
-
SHA256
35f67be68c5e548c9b940bdb80b2122ee9acd3f4c88767899f6800aef9926c3d
-
SHA512
7c57197820400c6d02f10b9abe49480ad07ecd09c044697bf21e9ed4c5a20a205737627e0c826870787076d5a0f7ee285201456061a7c159d5f74441225cf4f7
-
SSDEEP
3072:jb8RinudiP52xx67lLdBiHDoRFFV1kFRLtgYY8KBXicd8dI:UkgiPA6R/PRVsRZc8gieJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0efc8e4e92a0de2cb72a04eb2dbd4200_JC.exe
Files
-
NEAS.0efc8e4e92a0de2cb72a04eb2dbd4200_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ