Static task
static1
Behavioral task
behavioral1
Sample
NEAS.061aae6140f2024c0f5387fa81cddb70_JC.dll
Resource
win7-20230831-en
General
-
Target
NEAS.061aae6140f2024c0f5387fa81cddb70_JC.exe
-
Size
120KB
-
MD5
061aae6140f2024c0f5387fa81cddb70
-
SHA1
b95d244c7479a3af6c4d2042d43cdb8638b313b0
-
SHA256
80cee81d61e55e757da8bf4b3e7b8c78867d90d1f127bbdb009b708fd8f133ce
-
SHA512
779df53fb0eac596e2141b1f0c89db5440b9109117ba1ded9cc10640625187ae208d8c439d21a784863bdf26574babf9be148e5c6a31194e41a9389ab2779050
-
SSDEEP
3072:+RgKW0+GSlzPlufMUSuK1ZOX2BlKa9MaXwT:+RgP0WtyMB/zBoa9N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.061aae6140f2024c0f5387fa81cddb70_JC.exe
Files
-
NEAS.061aae6140f2024c0f5387fa81cddb70_JC.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ