Static task
static1
Behavioral task
behavioral1
Sample
NEAS.26d01bc93befccb8549307f719b2ce694249e714d6abf711dbe544171dadbf0aexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.26d01bc93befccb8549307f719b2ce694249e714d6abf711dbe544171dadbf0aexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.26d01bc93befccb8549307f719b2ce694249e714d6abf711dbe544171dadbf0aexe_JC.exe
-
Size
269KB
-
MD5
086703e4d154c810c50a4565e731bb3c
-
SHA1
acec783d2e0eb5afba7393dd8d62a2dc5e9c8a05
-
SHA256
26d01bc93befccb8549307f719b2ce694249e714d6abf711dbe544171dadbf0a
-
SHA512
ef242bf570db07f74945d01c389ac1e5a3a3a6b54db2c0a4d012e469aee7ad4173c505db1fb2b7f9fd99075931806f0fd3762bea8b2479048297e19fefdc941e
-
SSDEEP
6144:iJwnALfruq7dHhfoHZky4V+KR+9C2YtKb:8nLSq5Bfeb9WtK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.26d01bc93befccb8549307f719b2ce694249e714d6abf711dbe544171dadbf0aexe_JC.exe
Files
-
NEAS.26d01bc93befccb8549307f719b2ce694249e714d6abf711dbe544171dadbf0aexe_JC.exe.exe windows:5 windows x86
d17013689e887b16bffa7c0e14d6a4e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasA
InterlockedDecrement
GetCurrentProcess
GetEnvironmentStringsW
SetHandleInformation
SetVolumeMountPointW
OpenSemaphoreA
GetSystemDefaultLCID
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
EnumTimeFormatsA
EnumTimeFormatsW
GetCommandLineA
TzSpecificLocalTimeToSystemTime
GetDriveTypeA
GetEnvironmentStrings
ActivateActCtx
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
IsValidLocale
GetCalendarInfoA
SetVolumeMountPointA
SetConsoleCP
TerminateProcess
GetStartupInfoW
CreateJobObjectA
InterlockedExchange
FindFirstFileA
SetLastError
PeekConsoleInputW
MoveFileExA
MoveFileW
RemoveDirectoryA
EnumSystemCodePagesW
GlobalGetAtomNameA
GlobalFree
GetNumaHighestNodeNumber
OpenMutexA
GetProcessId
UnhandledExceptionFilter
GetFileType
BuildCommDCBAndTimeoutsW
AddVectoredExceptionHandler
AddAtomW
GetProfileStringA
FindNextFileA
EnumDateFormatsA
GlobalUnWire
GetModuleHandleA
SetLocaleInfoW
FindNextFileW
CreateMailslotA
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
FatalAppExitA
GetShortPathNameW
OpenSemaphoreW
FindFirstVolumeW
ReadFile
WriteConsoleW
GetVolumeNameForVolumeMountPointA
GetConsoleAliasExesA
EnumResourceNamesW
GetPrivateProfileSectionNamesW
GetCommandLineW
EnumDateFormatsExA
FlushFileBuffers
SetStdHandle
GetConsoleMode
WideCharToMultiByte
InterlockedIncrement
InterlockedCompareExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
DeleteFileA
HeapSetInformation
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
GetProcAddress
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
CloseHandle
FreeEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
HeapReAlloc
SetFilePointer
GetConsoleCP
CreateFileW
user32
GetMessagePos
gdi32
SelectPalette
GetCharABCWidthsW
GetTextFaceW
advapi32
LookupAccountSidW
shell32
DragFinish
ole32
CoGetInstanceFromFile
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 30.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ