Static task
static1
Behavioral task
behavioral1
Sample
NEAS.27945e0ba5cafc8ec180e4e9e0ee99f0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.27945e0ba5cafc8ec180e4e9e0ee99f0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.27945e0ba5cafc8ec180e4e9e0ee99f0_JC.exe
-
Size
480KB
-
MD5
27945e0ba5cafc8ec180e4e9e0ee99f0
-
SHA1
d5621ff949fc9fb11f5691cbab8e7f6670764f30
-
SHA256
87ab15dc81c303df77607f6ca95b8dd5e8ab38843b07e4b7457eaf1e0a09d346
-
SHA512
eb88fe9d9d304538272233483f89c81f2b9a3f3386c982f1b534c38d554de273c4dc9f7c92b7691e4171ad3926da0555d1f38762ecb60014dbaeb08c0f0fccb2
-
SSDEEP
6144:MtZbbGk/Oldzl4vMyF9p9dVsXc3RvfvMrobrR9C55z8ZVCse9tAOrK+SQE:blL4vMenrVCc3RnvNbrR9C55zu+tAOsx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.27945e0ba5cafc8ec180e4e9e0ee99f0_JC.exe
Files
-
NEAS.27945e0ba5cafc8ec180e4e9e0ee99f0_JC.exe.exe windows:1 windows x86
9077f2777dcd65233eb9aab779f488e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
gdi32
AbortDoc
AbortPath
AngleArc
AnimatePalette
ArcTo
Arc
BeginPath
BitBlt
Chord
CloseEnhMetaFile
CloseFigure
CloseMetaFile
CombineRgn
CreateBitmap
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBPatternBrush
CreateDIBPatternBrushPt
CreateDIBitmap
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateFontA
CreateFontIndirectA
CreateHalftonePalette
CreateHatchBrush
CreateICA
CreateMetaFileA
CreatePalette
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
DrawEscape
Ellipse
EndDoc
EndPage
EndPath
EnumMetaFile
EnumObjects
EqualRgn
Escape
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtEscape
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
FillPath
FillRgn
FlattenPath
FloodFill
FrameRgn
GdiComment
GetArcDirection
GetAspectRatioFilterEx
GetBitmapBits
GetBitmapDimensionEx
GetBkColor
GetBkMode
GetBoundsRect
GetBrushOrgEx
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCharWidthA
GetCharWidthFloatA
GetClipBox
GetClipRgn
GetColorAdjustment
GetCurrentObject
GetCurrentPositionEx
GetDeviceCaps
GetFontData
GetGlyphOutlineA
GetKerningPairsA
GetMapMode
GetMiterLimit
GetNearestColor
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetOutlineTextMetricsA
GetPaletteEntries
GetPath
GetPixel
GetPolyFillMode
GetROP2
GetRegionData
GetRgnBox
GetStockObject
GetStretchBltMode
GetTextAlign
GetTextCharacterExtra
GetTextColor
GetTextExtentPointA
GetTextFaceA
GetTextMetricsA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
InvertRgn
LPtoDP
LineTo
MaskBlt
MoveToEx
OffsetClipRgn
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PaintRgn
PatBlt
PathToRegion
Pie
PlayEnhMetaFile
PlayMetaFileRecord
PlayMetaFile
PlgBlt
PolyBezierTo
PolyBezier
PolyDraw
PolyPolygon
PolyPolyline
Polygon
PolylineTo
Polyline
PtInRegion
PtVisible
RealizePalette
RectInRegion
RectVisible
Rectangle
ResetDCA
ResizePalette
RestoreDC
RoundRect
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetArcDirection
SetBitmapBits
SetBitmapDimensionEx
SetBkColor
SetBkMode
SetBoundsRect
SetBrushOrgEx
SetColorAdjustment
SetMapMode
SetMapperFlags
SetMiterLimit
SetPaletteEntries
SetPixel
SetPixelV
SetPolyFillMode
SetROP2
SetRectRgn
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartDocA
StartPage
StretchBlt
StretchDIBits
StrokeAndFillPath
StrokePath
TextOutA
UnrealizeObject
UpdateColors
WidenPath
user32
GetActiveWindow
wsprintfA
AdjustWindowRectEx
AppendMenuA
ArrangeIconicWindows
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcA
ChangeClipboardChain
CharLowerA
CharLowerBuffA
CharToOemA
CharUpperA
CheckDlgButton
CheckMenuItem
CheckRadioButton
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CloseWindow
CopyRect
CreateCaret
CreateDialogIndirectParamA
CreateDialogParamA
CreateMenu
CreatePopupMenu
CreateWindowExA
DdeAccessData
DdeCmpStringHandles
DdeCreateDataHandle
DdeCreateStringHandleA
DdeFreeStringHandle
DdeGetData
DdeInitializeA
DdeNameService
DdePostAdvise
DdeUnaccessData
DdeUninitialize
DefWindowProcA
DeferWindowPos
DeleteMenu
DestroyCaret
DestroyCursor
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DlgDirListA
DlgDirListComboBoxA
DlgDirSelectComboBoxExA
DlgDirSelectExA
DrawFocusRect
DrawIcon
DrawMenuBar
DrawTextA
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
EqualRect
ExcludeUpdateRgn
FillRect
FindWindowA
FlashWindow
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetCaretPos
GetClassInfoA
GetClassNameA
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetKeyState
GetKeyboardState
GetLastActivePopup
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
GetMessageA
GetMessagePos
GetMessageTime
GetNextDlgGroupItem
GetNextDlgTabItem
GetOpenClipboardWindow
GetParent
GetPropA
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSystemMenu
GetSystemMetrics
GetTabbedTextExtentA
GetTopWindow
GetUpdateRect
GetUpdateRgn
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindow
GrayStringA
HideCaret
HiliteMenuItem
InflateRect
InsertMenuA
IntersectRect
InvalidateRect
InvalidateRgn
InvertRect
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsDlgButtonChecked
IsIconic
IsMenu
IsRectEmpty
IsWindowEnabled
IsWindow
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
LoadMenuA
LoadMenuIndirectA
LoadStringA
LockWindowUpdate
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OemToCharA
OffsetRect
OpenClipboard
OpenIcon
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ReuseDDElParam
ScreenToClient
ScrollDC
ScrollWindow
ScrollWindowEx
SendDlgItemMessageA
SendMessageA
SendNotifyMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongA
SetClipboardData
SetClipboardViewer
SetCursorPos
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenu
SetMenuItemBitmaps
SetMessageQueue
SetParent
SetPropA
SetRect
SetRectEmpty
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
TabbedTextOutA
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnpackDDElParam
UpdateWindow
ValidateRect
ValidateRgn
WinHelpA
WindowFromPoint
kernel32
ClearCommBreak
ClearCommError
CloseHandle
CreateEventA
CreateFileA
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
EscapeCommFunction
FileTimeToLocalFileTime
FileTimeToSystemTime
FindResourceA
FlushFileBuffers
FreeLibrary
FreeResource
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetCurrentThread
GetFileAttributesA
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOverlappedResult
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProfileIntA
GetThreadPriority
GetVersion
GetVolumeInformationA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFree
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadStringPtrA
IsBadStringPtrW
IsBadWritePtr
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockFile
LockResource
MoveFileA
MulDiv
MultiByteToWideChar
OpenEventA
OutputDebugStringA
PurgeComm
RaiseException
ReadFile
ResumeThread
RtlUnwind
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetThreadPriority
SetupComm
SuspendThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
WaitCommEvent
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteFile
WritePrivateProfileStringA
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
CloseHandle
CreateEventA
CreateFileA
CreateMutexA
CreateThread
ExitProcess
ExitThread
GetCPInfo
GetCommandLineA
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetTimeZoneInformation
GetVersion
LoadLibraryA
ReleaseMutex
RtlUnwind
SetConsoleCtrlHandler
SetEvent
SetStdHandle
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteFile
shell32
DragAcceptFiles
DragFinish
DragQueryFileA
comdlg32
ChooseColorA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
ttpcmn
_ChangeDefaultSet@4
_CommBinaryEcho@12
_CommBinaryOut@12
_CommInsert1Byte@8
_CommRawOut@12
_CommRead1Byte@8
_CommReadRawByte@8
_CommTextEcho@12
_CommTextOut@12
_GetCOMFlag@0
_GetKeyCode@8
_GetKeyStr@32
_LoadDefaultSet@4
_SetCOMFlag@4
_StartTeraTerm@4
Sections
BEGTEXT Size: 369KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 55KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 13KB - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 35KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE