Static task
static1
Behavioral task
behavioral1
Sample
NEAS.001763520b755b526feffd58c24c5500_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.001763520b755b526feffd58c24c5500_JC.exe
-
Size
316KB
-
MD5
001763520b755b526feffd58c24c5500
-
SHA1
d1d46246041d1842fd6185fc011cebffb5a3164a
-
SHA256
fce2b46d652e359169770fab3a6d3209faab2567dc889e8c067e59d9195f61b6
-
SHA512
d6e6867aa501a2a396ac4543fa285492e27dc20ffb7e43f78d65ca24732c6da4d63f576501bb9d59ada4e987a54b9ae160f0423f7630a5fdda116d691d2e608f
-
SSDEEP
6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4ORk:BVAWNDTJHq9DIMTW8c1Rk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.001763520b755b526feffd58c24c5500_JC.exe
Files
-
NEAS.001763520b755b526feffd58c24c5500_JC.exe.exe windows:5 windows x86
3b3ca5844bdb8b6b333c1e673e18f1c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
gethostbyaddr
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
IOKGDTTY Size: - Virtual size: 488KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 309KB - Virtual size: 312KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE