TponfKheem
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.429a498effc99a5ee9c28ed80a6e3b061734432da6ef5af325ea0b1620d30ecbdll_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.429a498effc99a5ee9c28ed80a6e3b061734432da6ef5af325ea0b1620d30ecbdll_JC.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.429a498effc99a5ee9c28ed80a6e3b061734432da6ef5af325ea0b1620d30ecbdll_JC.exe
-
Size
2.0MB
-
MD5
415291c5c3059fa97c0e80cba716b948
-
SHA1
fbe0c3ce1cd60594c9a72df17502fe7b55553bb5
-
SHA256
429a498effc99a5ee9c28ed80a6e3b061734432da6ef5af325ea0b1620d30ecb
-
SHA512
65c2a966cf11c06a26bc1c8798b3b2dd0910a4d6ec3b9f8ecb3d604752090fd37b2c792afbd62199294e757c0e9198a9778ba764bc7fc8494dd8e4e706135570
-
SSDEEP
49152:bgvg8jEnU59nP2xrk6i1njWaPwbul/wIknfwpANW:sTQnU5NPazi1njabg/3qIP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.429a498effc99a5ee9c28ed80a6e3b061734432da6ef5af325ea0b1620d30ecbdll_JC.exe
Files
-
NEAS.429a498effc99a5ee9c28ed80a6e3b061734432da6ef5af325ea0b1620d30ecbdll_JC.exe.dll windows:5 windows x86
ce2b1b9ebf14c707c66cc49f86d7f50d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
select
shlwapi
SHRegEnumUSKeyW
gdi32
EndDoc
SetLayout
SetWorldTransform
Chord
AbortPath
SetViewportOrgEx
GetBrushOrgEx
crypt32
CertStrToNameW
kernel32
GetProcessVersion
SetConsoleCtrlHandler
EnterCriticalSection
LeaveCriticalSection
ReadConsoleW
CreateProcessW
DeleteCriticalSection
GetModuleFileNameA
SystemTimeToTzSpecificLocalTime
GetBinaryTypeA
GetUserDefaultLCID
ReleaseMutex
LoadLibraryExW
advapi32
CryptGetDefaultProviderW
user32
GetLastInputInfo
ChangeClipboardChain
GetWindowRgnBox
ShowWindow
IsDlgButtonChecked
SetDlgItemInt
GetMenuItemCount
GetClipboardOwner
oleaut32
DispGetIDsOfNames
SafeArrayCreate
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Vosl1YL Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oOP Size: 956KB - Virtual size: 955KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ