Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3fbd7d4a57a164798b4857d39330d940_JC.dll
Resource
win7-20231020-en
General
-
Target
NEAS.3fbd7d4a57a164798b4857d39330d940_JC.exe
-
Size
120KB
-
MD5
3fbd7d4a57a164798b4857d39330d940
-
SHA1
6f93225454af95ea94f33f197e101e93073753dd
-
SHA256
29ac6dc66bd7d3ff4f449a80662bb2547c793b67277ae69e6f51289ef3d6476d
-
SHA512
1939c359e443ba2bc372da354e6e4371552507e184c629504d728be95b404706d50e6322dd02f2cad32bd0aafb0f96128b73d761fac377c3c1de38fda5311aba
-
SSDEEP
3072:kjkQQ4OKihJ0im5wj1WkoJwtiVEkRqDT:kjNpXimuj1WkzwFAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3fbd7d4a57a164798b4857d39330d940_JC.exe
Files
-
NEAS.3fbd7d4a57a164798b4857d39330d940_JC.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ