Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e44e2bf031a4e879dfb38c7bf65af3d0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e44e2bf031a4e879dfb38c7bf65af3d0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e44e2bf031a4e879dfb38c7bf65af3d0_JC.exe
-
Size
270KB
-
MD5
e44e2bf031a4e879dfb38c7bf65af3d0
-
SHA1
15dd0aa668835e4dadebd69deadb40452e634e98
-
SHA256
836d6104a64878719f775e15ccf14eaafd294ce97de2fa3366996f6896f542d5
-
SHA512
656c7fecc8b1f76db9864a97b58ac1f04a6d6f8fa03d862421355a412913180747877d634935da17227760fb805c4788bd5726ae66bf4e5a9c01e94f62a04754
-
SSDEEP
3072:0iORn4gsYzn+HpiUuo4SlJZiLV2RgOrdJQcs4VTkg6Mad2oS3h3s2dhAU5Ox51Yy:zJSJx5I+7Scdh86BRH8fkBH5Y3UJyumE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e44e2bf031a4e879dfb38c7bf65af3d0_JC.exe
Files
-
NEAS.e44e2bf031a4e879dfb38c7bf65af3d0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ