Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d112dd9c0e161fde4e6c36b388e48110_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d112dd9c0e161fde4e6c36b388e48110_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d112dd9c0e161fde4e6c36b388e48110_JC.exe
-
Size
1.7MB
-
MD5
d112dd9c0e161fde4e6c36b388e48110
-
SHA1
69517da121567361b3172029e2e397327cf451e0
-
SHA256
76f26b6c589e28ff2d84efd067fca1cbe9571f18156c7c52d69cbc1e6dee88b5
-
SHA512
1d9f50512a1379ae7d4d3383e71563122c9247ee866891bc6cfb06f27e181b7e58e14cc26bbcc0e0af31aa0fd4da038621345763cbb6d57880749e1af4e98ec9
-
SSDEEP
24576:B0B/v8kIR6GeKAvbBeQ8P4/pjudlL1DAUlYuJ7tbF1FHHyZxUTnMPuSyXDxHSUma:BQNDn8PKjuL6oJ73KZ+TnNSCxHSfwTT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d112dd9c0e161fde4e6c36b388e48110_JC.exe
Files
-
NEAS.d112dd9c0e161fde4e6c36b388e48110_JC.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
lQz Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ