Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7db5ec73aa9cdfd071f97ee7d6411df0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7db5ec73aa9cdfd071f97ee7d6411df0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.7db5ec73aa9cdfd071f97ee7d6411df0_JC.exe
-
Size
2.9MB
-
MD5
7db5ec73aa9cdfd071f97ee7d6411df0
-
SHA1
c1f3d658095bd3b06549bc982f39a369458dea01
-
SHA256
0ce141bb77d7f6a16c7725546bab69cbfbe3d3f535143d8837cfbb49c2bcd076
-
SHA512
32331f01ed4c8e2f00ea5f05a54ced4ad0d4d5cd1452a1c63b65941636cc5998545f02f0dc2b4f59788c95a0b270222d3ffece9c4f0f8f1dd48258e71838f080
-
SSDEEP
49152:1iCjbOgBzNdBukNbW9Z6ZbaHcYz5aAVKiw6ZWqTG93jJ3hWpVc:YCvBBznBPAg3Yz5J/693k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7db5ec73aa9cdfd071f97ee7d6411df0_JC.exe
Files
-
NEAS.7db5ec73aa9cdfd071f97ee7d6411df0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 644KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ