Static task
static1
Behavioral task
behavioral1
Sample
NEAS.002a41d103c2a0401d281edff1b63770_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.002a41d103c2a0401d281edff1b63770_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.002a41d103c2a0401d281edff1b63770_JC.exe
-
Size
23KB
-
MD5
002a41d103c2a0401d281edff1b63770
-
SHA1
e8a7fe0fe16efc0ed8ef32939b599b9a475da8e3
-
SHA256
21cd97054531affe78581b34b08657afa90fa3f30265dfa5575ea1957925502b
-
SHA512
cdedb6b4aff2dfaa357bd24390751acbed04858f6ade314ca79144f540417708f26ff021f73fb4c7ce6084cbb580a29ff2efbe4151a91d06785e198540d90e79
-
SSDEEP
384:VLrxWOi5Q4I6QapzRLosjATbcGOUHCc3sn2A2pxOywd5/yHOTlGEwm9+cDs7p:VIdo6QkzWbnCc3sn25RwuOTlGEHHe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.002a41d103c2a0401d281edff1b63770_JC.exe
Files
-
NEAS.002a41d103c2a0401d281edff1b63770_JC.exe.exe windows:4 windows x86
58069b0fe43b49c14a5c99e6ddaa2e2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursor
GetDC
IsMenu
GetWindowTextA
CopyImage
CopyIcon
GetWindowTextLengthA
LoadMenuA
DrawTextW
DrawIconEx
CreateIcon
DrawIcon
DrawTextA
GetDlgItem
GetMenu
CloseWindow
CopyRect
GetFocus
DialogBoxParamA
LoadCursorA
IsWindow
kernel32
GetCPInfo
GetStringTypeA
SetFilePointer
GetACP
GetCommandLineA
GetStartupInfoA
LCMapStringW
CreateFileA
GetStringTypeW
lstrcpynW
LCMapStringA
TerminateProcess
GetOEMCP
WriteFile
GetModuleFileNameA
MultiByteToWideChar
lstrcpynA
GetStdHandle
GetCurrentProcess
lstrcatA
GetFileType
SetHandleCount
comctl32
ImageList_Destroy
ImageList_GetIcon
ImageList_Draw
CreateUpDownControl
InitCommonControls
ImageList_Create
MenuHelp
DrawStatusTextW
CreateMappedBitmap
CreateStatusWindowW
CreateStatusWindow
ImageList_DragEnter
ImageList_DrawEx
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ