Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ffdc5bf63311371e9805c48bca79bdc0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.ffdc5bf63311371e9805c48bca79bdc0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ffdc5bf63311371e9805c48bca79bdc0_JC.exe
-
Size
170KB
-
MD5
ffdc5bf63311371e9805c48bca79bdc0
-
SHA1
23765671d83cd5d5f012886b6846bef9e0bb64c5
-
SHA256
1a002dd884fc7c238b89a5de76d44a5e2b86c4b70e6d21c6d13a7d6956a72a60
-
SHA512
a86cbf7128a3bbddd612c76ab0bdd01ec1708d019a0ca22fb00a82e33f68b819ed222d1c8706e4ae79806f66950156c3370ddd360cb83ac21fc05eb60a9c2874
-
SSDEEP
3072:dCcKpzOpm3uKQCDWeyDKVPy7THK4WZZzUR9Lr0lQbfSDADeak7dJHB/AKG8:o7zOSuccuVqfp2+S6SsQLH5AKb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ffdc5bf63311371e9805c48bca79bdc0_JC.exe
Files
-
NEAS.ffdc5bf63311371e9805c48bca79bdc0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HSP0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HSP1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE