Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0dc64c987ca7e06c6b661a322f2ac390_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0dc64c987ca7e06c6b661a322f2ac390_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0dc64c987ca7e06c6b661a322f2ac390_JC.exe
-
Size
194KB
-
MD5
0dc64c987ca7e06c6b661a322f2ac390
-
SHA1
33849bcc934c93496dcde291eb7f0111d5db9c11
-
SHA256
25ac0cdfdd05ff440922d304067edfb0cab8b9a57b20bfd6e06649e687861ec8
-
SHA512
f9da5b63e2435c74463f57abbddbcde6cb2c7e78147b72053fc31870a73af96552d9cfe4c9f32aa0cc52089484007595e3dd468eff63bb1f6e5e47f43dcfee5c
-
SSDEEP
3072:3JhtD9z/fksqfVdBokCRSgG3XSgzyUgIstJg85Kx6iG1eSr:vR9rfIokrR3XSgzyUf3RSr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0dc64c987ca7e06c6b661a322f2ac390_JC.exe
Files
-
NEAS.0dc64c987ca7e06c6b661a322f2ac390_JC.exe.exe windows:5 windows x86
2a70099c447ba8f46fae595c3bb9713b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_except_handler3
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
__setusermatherr
_c_exit
_wtoi
_wtol
__CxxFrameHandler
??2@YAPAXI@Z
wcschr
swscanf
wcstoul
??3@YAXPAX@Z
_ftol
_purecall
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegEnumKeyA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyW
kernel32
GetLastError
CreateMutexW
SetLastError
GetProcAddress
GetModuleHandleW
lstrcmpW
lstrcatW
CloseHandle
WriteFile
MulDiv
Sleep
lstrcmpiW
WriteProfileStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineW
lstrlenW
lstrcpyW
CreateFileW
GetFileSize
ReadFile
GetVersionExW
GetNumberFormatW
gdi32
SaveDC
RestoreDC
PatBlt
TextOutW
ExtTextOutW
SelectPalette
BitBlt
CreateCompatibleBitmap
SetLayout
SelectObject
DeleteObject
RealizePalette
SetBkColor
SetTextColor
SetBkMode
CreatePalette
CreateBitmap
CreateCompatibleDC
GetTextMetricsW
DeleteDC
SetTextAlign
Rectangle
GetTextExtentPoint32W
GetTextColor
CreateSolidBrush
SetPaletteEntries
GetStockObject
GetNearestColor
GetNearestPaletteIndex
GetPaletteEntries
GetDeviceCaps
CreateFontIndirectW
user32
KillTimer
SetCaretBlinkTime
SwapMouseButton
SetSysColors
SetTimer
GetForegroundWindow
DrawCaptionTempW
SetSysColorsTemp
EnumDisplaySettingsW
EnableWindow
SetFocus
ChangeDisplaySettingsW
GetFocus
SendMessageTimeoutW
LoadIconW
GetWindowRect
MapWindowPoints
SetWindowPos
FindWindowW
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
SystemParametersInfoW
GetWindow
GetDlgCtrlID
GetTopWindow
GetClientRect
HiliteMenuItem
EnableMenuItem
LoadMenuW
OffsetRect
InflateRect
GetSystemMetrics
FillRect
DrawFrameControl
DestroyIcon
DrawTextW
DrawEdge
LoadImageW
InvalidateRect
DefWindowProcW
EndPaint
BeginPaint
GetSysColor
RegisterClassW
LoadCursorW
PostMessageW
GetParent
SetWindowTextW
ShowWindow
comctl32
ord17
PropertySheetW
comdlg32
GetSaveFileNameW
shlwapi
StrTrimW
shell32
ord258
ShellExecuteW
ole32
CoInitialize
CoCreateInstance
uxtheme
ord3
IsThemeActive
GetCurrentThemeName
ord2
ord4
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE