Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6b38d061bb0df7022f0727a32336edd0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6b38d061bb0df7022f0727a32336edd0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.6b38d061bb0df7022f0727a32336edd0_JC.exe
-
Size
21KB
-
MD5
6b38d061bb0df7022f0727a32336edd0
-
SHA1
5ea66e5af81ac37524505c4b8eabb129ee8555a6
-
SHA256
d5c1b3c8f9c3f6e314c8cda99519cedd53ddbaa1b2a14492b97afcd8c1160b35
-
SHA512
7a181a7725434e4839deb42a80e72f5484c070c7ec61dcf2ddfce7ad80e4cb2ebb576a399f545313e2eb394fadee6427393b88ce10bd889db4ab0e46adefaeb6
-
SSDEEP
384:jIz4sDqzjC3Fu0IPPvof/aUmobHrL8jWfD+pTA3OoPeriiE/Bws10LkHjYndlFtU:jIUsDgmY0IPnof/PHfSlB/4e9EyS04DT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6b38d061bb0df7022f0727a32336edd0_JC.exe
Files
-
NEAS.6b38d061bb0df7022f0727a32336edd0_JC.exe.exe windows:4 windows x86
0c144496adf6d6951a8195019d714846
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
Sections
.text Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE