Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0d37d20f28fe07c5f9097b62dacef000_JC.dll
Resource
win7-20230831-en
General
-
Target
NEAS.0d37d20f28fe07c5f9097b62dacef000_JC.exe
-
Size
120KB
-
MD5
0d37d20f28fe07c5f9097b62dacef000
-
SHA1
9f3de14e2c9dcbc142814b4408cf783e5a6446a9
-
SHA256
d4c434dce2f8d291ca03c82c1f1eedff9eaddd0939e0dd2328e85e22f9960978
-
SHA512
91ab2508e2ac4730f635a454910294ebb5f097b6b3544e8500b9348f01be45594c6f67558ae1e246041da8ca61f6b5f8f96804d0d8a43a7efee0e8ccb1ff1476
-
SSDEEP
1536:jmQ2g/gcBlpvAd3jGTfNyAGlGOosmbUC2RH9N9lOkXj1mBlt53IcESgnRRdZ:phfZPyAGlGOtmAnF9NakT1GlTEDt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0d37d20f28fe07c5f9097b62dacef000_JC.exe
Files
-
NEAS.0d37d20f28fe07c5f9097b62dacef000_JC.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ