Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6e2261bdb006ada868bf61c4b88e05e0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.6e2261bdb006ada868bf61c4b88e05e0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6e2261bdb006ada868bf61c4b88e05e0_JC.exe
-
Size
794KB
-
MD5
6e2261bdb006ada868bf61c4b88e05e0
-
SHA1
7329231bd2b87ccb2fee793e7f6a7d726c9b4f89
-
SHA256
d433e71fce6265e7378e8a845dd27c185fbb73f3ccff4128495151aa5783ac97
-
SHA512
431ba4655ecd40f43218ccea6b0dd66f58da05c07fa9ada139ddba8a79e71b70f0d144ee13c191a18fbe65207f6c79c5895fe5f163d1c9ea87fb56c6cd6e7a7f
-
SSDEEP
6144:tY76k1Ndxi3vkcNRhjioOm3n/97TW6Yr:tYl1Tx6nhjim+6Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6e2261bdb006ada868bf61c4b88e05e0_JC.exe
Files
-
NEAS.6e2261bdb006ada868bf61c4b88e05e0_JC.exe.exe windows:4 windows x86
e5d77ab84aab8e8e4c3ed97a638e8aef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
InterlockedDecrement
LoadLibraryW
GetProcAddress
GetModuleHandleW
lstrcmpiW
FreeLibrary
SetLastError
GetModuleFileNameW
OutputDebugStringW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
SetThreadLocale
GetThreadLocale
CreateProcessW
GetSystemDirectoryW
CompareStringW
GetUserDefaultUILanguage
LocalFree
FormatMessageW
GetNumberFormatW
HeapReAlloc
WaitForSingleObject
WaitForMultipleObjects
SetEvent
CreateTimerQueueTimer
DeleteTimerQueueTimer
ResetEvent
CreateThread
OpenEventW
CloseHandle
CreateEventW
GetPrivateProfileStringW
HeapAlloc
HeapFree
GetProcessHeap
GetSystemInfo
GetVersionExA
WideCharToMultiByte
CompareStringA
OutputDebugStringA
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
GetDriveTypeW
GetVolumePathNameW
GetFileType
LoadLibraryA
LocalAlloc
FlushFileBuffers
GetSystemTime
MapViewOfFile
SetFilePointer
SetEndOfFile
ReleaseMutex
CreateMutexW
GetFileSize
ReadFile
CreateDirectoryW
WriteFile
GetFileAttributesW
CreateFileW
GetFileSizeEx
CreateFileMappingW
UnmapViewOfFile
ExpandEnvironmentStringsW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToFileTime
FindResourceExW
LockResource
GetCurrentThread
GetSystemDefaultUILanguage
GetSystemWindowsDirectoryW
InterlockedCompareExchange
VerifyVersionInfoW
VerSetConditionMask
RtlUnwind
Sleep
VirtualAllocEx
GetModuleHandleA
user32
RegisterClipboardFormatW
CharPrevW
AttachThreadInput
CreateDialogParamA
GetMenu
SetMenu
mtxex
DllGetClassObject
msrle32
DriverProc
wiadefui
DllUnregisterServer
snmpapi
SnmpUtilOctetsCmp
riched20
IID_ITextHost
dsquery
DllInstall
shimgvw
ImageView_PrintTo
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 739KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ