Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1c12fc21758e10a869f9878401138c3a241c972ac156e61b8c0b51761582382b_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.1c12fc21758e10a869f9878401138c3a241c972ac156e61b8c0b51761582382b_JC.exe
-
Size
2.0MB
-
MD5
c7f0084655b161865d7b273e1bbd9227
-
SHA1
cf47b69c445b7b04c5540ced5d283cd62b23824c
-
SHA256
1c12fc21758e10a869f9878401138c3a241c972ac156e61b8c0b51761582382b
-
SHA512
b208db6431e97b3a44e045e15f5a780c8796d08deb51661964ae971b13c9216238b3d3490863343e95fd6f05662fdc2198277887b33fda99c6bf79d3d150e821
-
SSDEEP
49152:sl5dho/iTeig9+9DnMBejEPXpaMCZfkCpEQQyX28GsPl:k5voq6iRMBejaf0fk6EVAl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1c12fc21758e10a869f9878401138c3a241c972ac156e61b8c0b51761582382b_JC.exe
Files
-
NEAS.1c12fc21758e10a869f9878401138c3a241c972ac156e61b8c0b51761582382b_JC.exe.exe windows:4 windows x86
b44caaf7e0740f00d0015a0ae85e9327
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
waveOutRestart
ws2_32
inet_ntoa
rasapi32
RasHangUpA
kernel32
SetLastError
user32
GetSysColorBrush
gdi32
CreateSolidBrush
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_EndDrag
wininet
InternetGetConnectedState
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 956KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ