Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dd8ce64281967ca242766de5d78b4be0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dd8ce64281967ca242766de5d78b4be0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.dd8ce64281967ca242766de5d78b4be0_JC.exe
-
Size
37KB
-
MD5
dd8ce64281967ca242766de5d78b4be0
-
SHA1
0d286ee9a6e043d1635db75a65fe45e656aa3457
-
SHA256
c71ddee32753f3927d9922d4a6b9d3d7961ef31e6ef460b645304aa65478fc10
-
SHA512
d7f65a71b60d4309e12ffbbc1cd299c428e948709eb9685ce09654935b3509dbf41a75aad214417506dd39f445efa5434851405064c5835689b2a11f7e0d6346
-
SSDEEP
768:8FSrDBFhsXqavat3aTsNbiU0WZMyGWb98ZydalfuV3lVwARLIZz:8orDO6xtKSgUGWb98OaFufVwaez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dd8ce64281967ca242766de5d78b4be0_JC.exe
Files
-
NEAS.dd8ce64281967ca242766de5d78b4be0_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ