Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0057cb0e953a9225350426ee0755b790_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0057cb0e953a9225350426ee0755b790_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.0057cb0e953a9225350426ee0755b790_JC.exe
-
Size
128KB
-
MD5
0057cb0e953a9225350426ee0755b790
-
SHA1
5746da3c448622bd6938600086eeb125d592af4b
-
SHA256
effa7b6ac28c17f0ebcb61893217627c8596c2da9ac9af751cfb21bd75e0d8cf
-
SHA512
42399321e51872a394378e07ef38d3bb06a59cfa7e100287bfd9b07282cc1f298bb41926afc6f683bc06c18af804f17d10d5d9825c65fe0e64e43986183eb8db
-
SSDEEP
3072:rwgRDhNuDrK1b9wRRUUaSiHgSskGjCU5Z:rjjuDrOYRpiHgSske5Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0057cb0e953a9225350426ee0755b790_JC.exe
Files
-
NEAS.0057cb0e953a9225350426ee0755b790_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rda Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data Size: 768B - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ