Static task
static1
Behavioral task
behavioral1
Sample
NEAS.47e36ed61d8fb370d6bfd5c1b9cce3d124f7d7aaf94e5dcf7a7b73637b59d179exe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.47e36ed61d8fb370d6bfd5c1b9cce3d124f7d7aaf94e5dcf7a7b73637b59d179exe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.47e36ed61d8fb370d6bfd5c1b9cce3d124f7d7aaf94e5dcf7a7b73637b59d179exe_JC.exe
-
Size
472KB
-
MD5
1ee2faa57609afea4b38126eb8f77fcc
-
SHA1
10361af28616be3edbca37d3b511018858741429
-
SHA256
47e36ed61d8fb370d6bfd5c1b9cce3d124f7d7aaf94e5dcf7a7b73637b59d179
-
SHA512
6e4e85042760ccb0b9e5ed0927c67cc40a1164394c0ae15e7854a6ac06c6327059ecbfedcef6168ee5ced83c2fcd4c3f1efd9b57dddf101db36bc5266521097f
-
SSDEEP
6144:Wq2q5D2ruq257NHVbwz2RPBTCXPVjdn4DkPqzEt4LaYEVzsZOQHLtAvVEn5q:rdDdqyRH+2RPY4HYt4O9VzuNtuQ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.47e36ed61d8fb370d6bfd5c1b9cce3d124f7d7aaf94e5dcf7a7b73637b59d179exe_JC.exe
Files
-
NEAS.47e36ed61d8fb370d6bfd5c1b9cce3d124f7d7aaf94e5dcf7a7b73637b59d179exe_JC.exe.exe windows:5 windows x86
d17013689e887b16bffa7c0e14d6a4e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasA
InterlockedDecrement
GetCurrentProcess
GetEnvironmentStringsW
SetHandleInformation
SetVolumeMountPointW
OpenSemaphoreA
GetSystemDefaultLCID
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
EnumTimeFormatsA
EnumTimeFormatsW
GetCommandLineA
TzSpecificLocalTimeToSystemTime
GetDriveTypeA
GetEnvironmentStrings
ActivateActCtx
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
IsValidLocale
GetCalendarInfoA
SetVolumeMountPointA
SetConsoleCP
TerminateProcess
GetStartupInfoW
CreateJobObjectA
InterlockedExchange
FindFirstFileA
SetLastError
PeekConsoleInputW
MoveFileExA
MoveFileW
RemoveDirectoryA
EnumSystemCodePagesW
GlobalGetAtomNameA
GlobalFree
GetNumaHighestNodeNumber
OpenMutexA
GetProcessId
UnhandledExceptionFilter
GetFileType
BuildCommDCBAndTimeoutsW
AddVectoredExceptionHandler
AddAtomW
GetProfileStringA
FindNextFileA
EnumDateFormatsA
GlobalUnWire
GetModuleHandleA
SetLocaleInfoW
FindNextFileW
CreateMailslotA
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
FatalAppExitA
GetShortPathNameW
OpenSemaphoreW
FindFirstVolumeW
ReadFile
WriteConsoleW
GetVolumeNameForVolumeMountPointA
GetConsoleAliasExesA
EnumResourceNamesW
GetPrivateProfileSectionNamesW
GetCommandLineW
EnumDateFormatsExA
FlushFileBuffers
SetStdHandle
GetConsoleMode
WideCharToMultiByte
InterlockedIncrement
InterlockedCompareExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
DeleteFileA
HeapSetInformation
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
GetProcAddress
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
CloseHandle
FreeEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
HeapReAlloc
SetFilePointer
GetConsoleCP
CreateFileW
user32
GetMessagePos
gdi32
SelectPalette
GetCharABCWidthsW
GetTextFaceW
advapi32
LookupAccountSidW
shell32
DragFinish
ole32
CoGetInstanceFromFile
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 252KB - Virtual size: 30.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ