NEAS[.]2023-09-07_6e7accfdaab8731ae3d389cdc3a5a915_xiaoba_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-07_6e7accfdaab8731ae3d389cdc3a5a915_xiaoba_JC.exe
Size

2.2MB
MD5

6e7accfdaab8731ae3d389cdc3a5a915
SHA1

65cb64f74e9926cc489eb01471add99ef8b0c657
SHA256

63ebaae972d8756a41c35362c9e6b6337ecda38c907236dce3be1041ea415b52
SHA512

d938adb04f2779dfd87b1e0bd14cb064306d0364ac1f9a87d382971d1e7bb1c2f7bb48007b747d1b0f3f09e9e8c0a10c1d06fdde9ebd08ef6bf0a18ac1f298c3
SSDEEP

49152:qR8KvbXwA6gY1q7DK2mldEITN75xwMDlv1J231OV50EG:UvcA6gY1YmlyITN7rnJvTUYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-07_6e7accfdaab8731ae3d389cdc3a5a915_xiaoba_JC.exe

Files

NEAS.2023-09-07_6e7accfdaab8731ae3d389cdc3a5a915_xiaoba_JC.exe
.exe windows:5 windows x86

27df0f15ac3215e27bde7985644b6e89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool msvfw32

ClosePrinter ��?

Sections

.text
Size: 1.3MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

SE
Size: 832KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

SE
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

SE
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ