Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3896cdc34ae6c47b11949d6773899ef9caeffd4c1a42e05ffccc14452c1917acexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.3896cdc34ae6c47b11949d6773899ef9caeffd4c1a42e05ffccc14452c1917acexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.3896cdc34ae6c47b11949d6773899ef9caeffd4c1a42e05ffccc14452c1917acexe_JC.exe
-
Size
269KB
-
MD5
76bf556f76970eeb1d74954fe3c03b9f
-
SHA1
bd384de3bd5eda89026cec8bceed4ef76440d8cb
-
SHA256
3896cdc34ae6c47b11949d6773899ef9caeffd4c1a42e05ffccc14452c1917ac
-
SHA512
197b60e34e7a36258e3a0e093a3bf8fb52e25df66dd2a9067dcbf5c7ab4fb62f52efd7dd6f4e8b5eead93cfb85afc7bd067eb492a4c5c3be33a87b901668576c
-
SSDEEP
3072:x9HPz8Q6Y9yE9wFxMruqQ2tqga4W2nitsrJigAyR+3t8doQa1P/IK4:LP4Oh97ruqQoqgnWdtskgFR+98aPq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3896cdc34ae6c47b11949d6773899ef9caeffd4c1a42e05ffccc14452c1917acexe_JC.exe
Files
-
NEAS.3896cdc34ae6c47b11949d6773899ef9caeffd4c1a42e05ffccc14452c1917acexe_JC.exe.exe windows:5 windows x86
d17013689e887b16bffa7c0e14d6a4e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasA
InterlockedDecrement
GetCurrentProcess
GetEnvironmentStringsW
SetHandleInformation
SetVolumeMountPointW
OpenSemaphoreA
GetSystemDefaultLCID
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
EnumTimeFormatsA
EnumTimeFormatsW
GetCommandLineA
TzSpecificLocalTimeToSystemTime
GetDriveTypeA
GetEnvironmentStrings
ActivateActCtx
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
IsValidLocale
GetCalendarInfoA
SetVolumeMountPointA
SetConsoleCP
TerminateProcess
GetStartupInfoW
CreateJobObjectA
InterlockedExchange
FindFirstFileA
SetLastError
PeekConsoleInputW
MoveFileExA
MoveFileW
RemoveDirectoryA
EnumSystemCodePagesW
GlobalGetAtomNameA
GlobalFree
GetNumaHighestNodeNumber
OpenMutexA
GetProcessId
UnhandledExceptionFilter
GetFileType
BuildCommDCBAndTimeoutsW
AddVectoredExceptionHandler
AddAtomW
GetProfileStringA
FindNextFileA
EnumDateFormatsA
GlobalUnWire
GetModuleHandleA
SetLocaleInfoW
FindNextFileW
CreateMailslotA
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
FatalAppExitA
GetShortPathNameW
OpenSemaphoreW
FindFirstVolumeW
ReadFile
WriteConsoleW
GetVolumeNameForVolumeMountPointA
GetConsoleAliasExesA
EnumResourceNamesW
GetPrivateProfileSectionNamesW
GetCommandLineW
EnumDateFormatsExA
FlushFileBuffers
SetStdHandle
GetConsoleMode
WideCharToMultiByte
InterlockedIncrement
InterlockedCompareExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
DeleteFileA
HeapSetInformation
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
GetProcAddress
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
CloseHandle
FreeEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
HeapReAlloc
SetFilePointer
GetConsoleCP
CreateFileW
user32
GetMessagePos
gdi32
SelectPalette
GetCharABCWidthsW
GetTextFaceW
advapi32
LookupAccountSidW
shell32
DragFinish
ole32
CoGetInstanceFromFile
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 30.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ