Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0a6ea17ee517030d87267ecf33863cb0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0a6ea17ee517030d87267ecf33863cb0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0a6ea17ee517030d87267ecf33863cb0_JC.exe
-
Size
66KB
-
MD5
0a6ea17ee517030d87267ecf33863cb0
-
SHA1
83bce58a46282cde310a06e8bcdbd34f6e8c1397
-
SHA256
9ddc86a38cd5a90aa8e51b08f19ac724a74b4476e758779f0822e0f4417ea0b0
-
SHA512
62a83ca89e76536a75256987cd48270b9d88dcf1ec44222421a37d4057c874e97d1089154e24e98631c79072ce0f87730e10a9ba6cb34b577f4fc7cf0387c68a
-
SSDEEP
1536:gzQmPPWDZNrnjRMZEL087H3UZwxrA2lGY2f7se:gUmPIhx087XUGxE6Grp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0a6ea17ee517030d87267ecf33863cb0_JC.exe
Files
-
NEAS.0a6ea17ee517030d87267ecf33863cb0_JC.exe.exe windows:4 windows x86
d7912309d4e8de3a426b7777d4162f17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_hread
GetModuleHandleExA
ReadConsoleOutputAttribute
SetThreadPriority
WriteConsoleOutputA
SetComputerNameEx2W
ExpandEnvironmentStringsA
FatalExit
lstrcpynA
OpenProcess
SetConsoleCursor
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE