Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b2df2204fb38eef9130869017c032846d1d92acad5ec2fea88265b99d9899986_JC.exe
Resource
win7-20230831-en
General
-
Target
NEAS.b2df2204fb38eef9130869017c032846d1d92acad5ec2fea88265b99d9899986_JC.exe
-
Size
6.4MB
-
MD5
61d54f990b9d2d408ac3dafe781a2cbf
-
SHA1
e3473a515af5be3c99e76e6f7b57c25e3d4ca0fb
-
SHA256
b2df2204fb38eef9130869017c032846d1d92acad5ec2fea88265b99d9899986
-
SHA512
e8628c0554908e34912cafa634444dbe91ce31c3ce141df97657164f3a20f13cbf3b52832f1225af795b4b8b88a6db4853e70121df8f826819b9942899df13cb
-
SSDEEP
196608:8jITYxEJDoTgKeGjll1mElRrHPgMaFDh+wxnJ:8HsKhll9vki6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b2df2204fb38eef9130869017c032846d1d92acad5ec2fea88265b99d9899986_JC.exe
Files
-
NEAS.b2df2204fb38eef9130869017c032846d1d92acad5ec2fea88265b99d9899986_JC.exe.exe windows:5 windows x86
8a5bf83f52ebc0d5116d88077de91fe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetDesktopWindow
CharUpperBuffW
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
_TrackMouseEvent
ws2_32
WSACleanup
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 577KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JX< Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.\ZZ Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.|7, Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ