Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d0a28f18cc0e05ed87f45a02d48f2650_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d0a28f18cc0e05ed87f45a02d48f2650_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d0a28f18cc0e05ed87f45a02d48f2650_JC.exe
-
Size
1.8MB
-
MD5
d0a28f18cc0e05ed87f45a02d48f2650
-
SHA1
27759f6abcb448599785ae8038e83556bed86933
-
SHA256
c5c40e5cb6448b41c0b37e715217fccc1f28a8832831de35a32e7208d3c5008a
-
SHA512
e88f07dd47003ad2eca0fc9f093a74bd8c39ae38825092a3e1ca6939fdb08dd4f26c07daa14eb796d0590d2f91dab5067939bac5c5d755a27fd92e28efbee18f
-
SSDEEP
49152:sFc0E7mAG1pZi/Q/GdbAvHcSd+IUOS4+duX5uq3lxAq:sWFmN/wrdUHrwWS4lXblxb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d0a28f18cc0e05ed87f45a02d48f2650_JC.exe
Files
-
NEAS.d0a28f18cc0e05ed87f45a02d48f2650_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ