Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4b4433f996643f1b9716e29e3f89b542d935ed4fbd7b18269e430d171e9e8200exe_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.4b4433f996643f1b9716e29e3f89b542d935ed4fbd7b18269e430d171e9e8200exe_JC.exe
-
Size
325KB
-
MD5
3d7c5c23b3420e3c6382fdc67a273fe2
-
SHA1
35e850a563005659c3f19f5d367372d7a7e96c78
-
SHA256
4b4433f996643f1b9716e29e3f89b542d935ed4fbd7b18269e430d171e9e8200
-
SHA512
8a23064614ca569dab2426825c82c42b11e5eb15343205576b524ba1a0d2d7856145e2e44539fb914ac6a9f3fc15a6d3b2cdc3e2135d41055319aecd1589c955
-
SSDEEP
6144:SoO+nalpeX9Ts6dda1vkw6F84d1pTAMuqCqfMy:hSC9owdCmq4RAMzCKM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4b4433f996643f1b9716e29e3f89b542d935ed4fbd7b18269e430d171e9e8200exe_JC.exe
Files
-
NEAS.4b4433f996643f1b9716e29e3f89b542d935ed4fbd7b18269e430d171e9e8200exe_JC.exe.exe windows:5 windows x86
badfd3002a7785754765042ffe6b2bf7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
GetEnvironmentStringsW
SetHandleInformation
GetProfileStringW
AddConsoleAliasW
SetVolumeMountPointW
GetComputerNameW
OpenSemaphoreA
GetSystemDefaultLCID
BackupSeek
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
GetConsoleAliasesLengthA
GetConsoleAliasExesW
EnumTimeFormatsA
EnumTimeFormatsW
TzSpecificLocalTimeToSystemTime
ActivateActCtx
GlobalAlloc
LoadLibraryW
GetCalendarInfoW
SetVolumeMountPointA
SetConsoleCP
GetExitCodeProcess
TerminateProcess
GetSystemDirectoryA
GetStartupInfoW
RaiseException
CreateJobObjectA
GetDriveTypeW
InterlockedExchange
GetLastError
GetCurrentDirectoryW
PeekConsoleInputW
RemoveDirectoryA
EnumSystemCodePagesW
GlobalGetAtomNameA
GetNumaHighestNodeNumber
LoadLibraryA
OpenMutexA
GetProcessId
LocalAlloc
MoveFileA
BuildCommDCBAndTimeoutsW
GetNumberFormatW
AddAtomW
FindNextFileA
GlobalUnWire
GetModuleHandleA
SetLocaleInfoW
EnumResourceNamesA
CreateMailslotA
GetStringTypeW
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
FatalAppExitA
GetShortPathNameW
FindFirstVolumeA
FindAtomW
FindFirstVolumeW
DeleteFileW
FindFirstFileW
SetDefaultCommConfigA
GetCommandLineW
GetFileSize
GetPrivateProfileIntW
GetVolumeNameForVolumeMountPointA
ReadFile
WriteConsoleW
WideCharToMultiByte
InterlockedIncrement
InterlockedCompareExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcAddress
ExitProcess
DeleteFileA
HeapSetInformation
GetCPInfo
RtlUnwind
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
CloseHandle
FreeEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileW
gdi32
GetCharABCWidthsW
GetTextFaceW
SelectPalette
advapi32
LookupAccountSidW
ole32
CoGetInstanceFromFile
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 30.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ