Static task
static1
Behavioral task
behavioral1
Sample
NEAS.477af2102dc0778ca201725d8c9b40b0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.477af2102dc0778ca201725d8c9b40b0_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.477af2102dc0778ca201725d8c9b40b0_JC.exe
-
Size
146KB
-
MD5
477af2102dc0778ca201725d8c9b40b0
-
SHA1
4cc46f4919f8f36c13ae0c39843b44f27b5c3b18
-
SHA256
75843b550ef97020108094516b5d43d874a8b9d203008e341ae1ffd6cbf224a9
-
SHA512
c741f378c43e7cff9b89315b5c8ac31f59a32c525e42fd1c2c109d324c886c021bbceab7da2b7d4b5bdaf1e541d29118bf7d25ef23eaa0a5224e11481ace0b26
-
SSDEEP
1536:g3oIf3BrMZFLRZ2y4UC0zeK28mczpDOmdXpum1EtDmkT3ky4ynOXJNjyx98rmzQC:4xMZNZU8mcpumkIzlrecrmkRUDGvqK8d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.477af2102dc0778ca201725d8c9b40b0_JC.exe
Files
-
NEAS.477af2102dc0778ca201725d8c9b40b0_JC.exe.exe windows:1 windows x86
ff17e94c9d9774363ae48232954c7538
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetModuleHandleA
GetProcAddress
CloseHandle
GetTickCount
RtlUnwind
EnterCriticalSection
SetLastError
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
GetStartupInfoA
GetLastError
GetCommandLineA
lstrlenA
GetVersionExA
GetModuleFileNameA
LCMapStringA
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
crtdll
__GetMainArgs
exit
raise
signal
advapi32
RegOpenKeyExA
RegQueryValueExA
AddAccessAllowedAce
RegSetValueExA
RegCreateKeyExA
RegCloseKey
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 344B - Virtual size: 344B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ