Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0b13ea2cefbf4aaa13adf6ddb65a01a0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0b13ea2cefbf4aaa13adf6ddb65a01a0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0b13ea2cefbf4aaa13adf6ddb65a01a0_JC.exe
-
Size
118KB
-
MD5
0b13ea2cefbf4aaa13adf6ddb65a01a0
-
SHA1
8fac70451acb3b706b7aab1060b2129a0b5cf6a9
-
SHA256
b22f76d43126a88f971476a620b424eada4a9ce5c9d52420b93c35e056daec5e
-
SHA512
8d6bbecad841e34d0bd795b93f1f9b865e0e9c83e040a22453464afc58f029ca00ba7b44ca3d0f8f6b01c18e2d4ae70d6108e242dc75a4d7948c55a58e6548d7
-
SSDEEP
3072:OOzX7TztPTN0l6iv9A9DyMZzo07WRouFhezqk:BvlT/l9W8c0Lu2J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0b13ea2cefbf4aaa13adf6ddb65a01a0_JC.exe
Files
-
NEAS.0b13ea2cefbf4aaa13adf6ddb65a01a0_JC.exe.exe windows:4 windows x86
a4b5e3817251129e17842d4f4d75b0c7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToDosDateTime
WaitForSingleObjectEx
GetThreadPriorityBoost
RequestDeviceWakeup
CreateFileMappingA
GetSystemInfo
ReleaseSemaphore
CreateDirectoryExA
GetDevicePowerState
FatalAppExitA
CloseHandle
SystemTimeToTzSpecificLocalTime
GlobalSize
MulDiv
GlobalFix
IsDebuggerPresent
IsValidCodePage
GetSystemTimeAsFileTime
GetStdHandle
EnumTimeFormatsW
GetCurrentThread
GetLastError
UnmapViewOfFile
LocalFree
DefineDosDeviceW
FreeUserPhysicalPages
GetHandleInformation
GetTickCount
SetMailslotInfo
lstrcpynA
SetupComm
WriteProfileSectionA
user32
MapVirtualKeyW
CopyImage
IntersectRect
DdeQueryStringW
SendMessageCallbackW
CheckMenuItem
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 39KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 512B - Virtual size: 402B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oxapxvf Size: - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE