Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5183f3f3e62a88cc54e9201132833f20_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.5183f3f3e62a88cc54e9201132833f20_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5183f3f3e62a88cc54e9201132833f20_JC.exe
-
Size
440KB
-
MD5
5183f3f3e62a88cc54e9201132833f20
-
SHA1
12b4af7e369ee3f29eb84a4c800b50e550d5fa86
-
SHA256
e248aa0f42bbd5fedca42338313bd11849a06af693e2197918159e56778cc917
-
SHA512
ecb070a6e50c6ae31c816229b6ca36e3c765288f5e871d17daf79f7467f4d316b389452fa81c2ebd8c279513564d5061892e3bf8cd1b1db1b42c56842dc8b44f
-
SSDEEP
6144:Q1blKgzelZNQSBQGH/CSpWqTVmQdNs6+X7jINs6+X7j:Q4fBQGH6SfsQE6+X/l6+X/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5183f3f3e62a88cc54e9201132833f20_JC.exe
Files
-
NEAS.5183f3f3e62a88cc54e9201132833f20_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE