Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d3bf699e53d4ef859c0044787fb442a0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d3bf699e53d4ef859c0044787fb442a0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d3bf699e53d4ef859c0044787fb442a0_JC.exe
-
Size
14KB
-
MD5
d3bf699e53d4ef859c0044787fb442a0
-
SHA1
73d7e857b17a9711d8709a97fdba9e771db484de
-
SHA256
2b19166364c4b677fbeed780497239dcedeca3210ac7651e5f2c86e13af76d31
-
SHA512
5783cb48f307a98acc33578d76b923d42ded98f533184e3f111163616c5cc12f99aa55baaa345bdacfc88dcc7d338dd922f3acee4743c160b7f455f5daea8285
-
SSDEEP
384:D/iH0YoExjv4bbbbbgE5VVJuEXYDE045HllKlKlKlK:jNyMoA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d3bf699e53d4ef859c0044787fb442a0_JC.exe
Files
-
NEAS.d3bf699e53d4ef859c0044787fb442a0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ