Static task
static1
Behavioral task
behavioral1
Sample
NEAS.01672af4c90128318d7de41e90867fc0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.01672af4c90128318d7de41e90867fc0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.01672af4c90128318d7de41e90867fc0_JC.exe
-
Size
768KB
-
MD5
01672af4c90128318d7de41e90867fc0
-
SHA1
8f7ad8ea242b9708999b12ba8932a6fbd4b449af
-
SHA256
941968c579e1cb82535cb40c1bef3388675b7206a45a8cbca926572f219f2041
-
SHA512
cb3189474e77d9518d86bb422133a03eeab4402990714f174508aff7dbdbd85626d1d884ccff47da50a2abcaed84a34d8b869db151b9b634e4d3a04302594e11
-
SSDEEP
12288:sgVEWrrguBKsOpfkZlaJDUyUjRtEPsfPF5Aiwb83QK9Pk3rk:1OeUfs2kZblysf9iiQ83Z9c3r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.01672af4c90128318d7de41e90867fc0_JC.exe
Files
-
NEAS.01672af4c90128318d7de41e90867fc0_JC.exe.exe windows:4 windows x86
7aea64def47e14e175ce51ffdf11af69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateHardLinkA
CreateFileA
MapViewOfFile
CreateDirectoryW
GetStartupInfoA
SetLastError
HeapSize
GetTickCount
LoadLibraryA
CreateSemaphoreA
GetStdHandle
CreateMutexW
SetLastError
HeapDestroy
GetFileSize
OpenSemaphoreA
ReadConsoleA
Sleep
GetFileAttributesA
DeleteFileW
SetEvent
GetProcessHeap
VirtualProtect
GetPriorityClass
GetLocalTime
dsprop
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
serialui
drvGetDefaultCommConfigW
drvSetDefaultCommConfigA
drvGetDefaultCommConfigA
drvSetDefaultCommConfigW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE