Static task
static1
General
-
Target
NEAS.205f013eff4816cd4118b1cf8475cc60_JC.exe
-
Size
120KB
-
MD5
205f013eff4816cd4118b1cf8475cc60
-
SHA1
6506101aae475e009e03d95adf9a452b11441b37
-
SHA256
8302a6f302545ba62f79383d7d68745dc369d57f333c6bc7869ee204c812c4f9
-
SHA512
ffc85e01572eebe7d5a2f5d4c437dba1069fb51a09e3341b35c982960592a857b169a5fe59cd86cec8bffb00dfff55a6157ef2b85abb26fc16c71b67fdc3e3ec
-
SSDEEP
1536:1a7XT4PfLl5XOx++jC9wCWnUruELvEGf9NAj3HFt4NgdXem8PPdjhQe1lpLVdPNC:w7XT4yodVWnP2923HZb8PPd9X1lf+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.205f013eff4816cd4118b1cf8475cc60_JC.exe
Files
-
NEAS.205f013eff4816cd4118b1cf8475cc60_JC.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ