Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3964961f88d59d488a5883c47c994170_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.3964961f88d59d488a5883c47c994170_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.3964961f88d59d488a5883c47c994170_JC.exe
-
Size
14KB
-
MD5
3964961f88d59d488a5883c47c994170
-
SHA1
d80b0bdec1ff77fe2b14929c7ad140f313d1b30e
-
SHA256
633d9e18c01707ada561c8bef3d894919e524d4c02269872ab838131563b2d2e
-
SHA512
7e9c0d9f51146bad8b0611c8d305242abb43973d7dcababd832bf5f688b172a6897f8d6ba60cb71379bfeb293267fe7b2c86aead051a2915bc469a244efddbb5
-
SSDEEP
384:ofH2P8I75jwN9ZrtrgJknd+VMho/gIDE045HmPPPP:hP8I1snZtrgeIVCo4SAMPPPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3964961f88d59d488a5883c47c994170_JC.exe
Files
-
NEAS.3964961f88d59d488a5883c47c994170_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ