Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b05d34dab3469225379b787a3c2893d0_JC.dll
Resource
win7-20231025-en
General
-
Target
NEAS.b05d34dab3469225379b787a3c2893d0_JC.exe
-
Size
120KB
-
MD5
b05d34dab3469225379b787a3c2893d0
-
SHA1
9a5dd27b93526e60e20cd3edef1a9fcf9c204253
-
SHA256
55eac0e1b2cf0effdbe412b994c1c4d8f2374d215b251e0476b2fe2e80addc7b
-
SHA512
466ac421d886655d2d159cd5a26d70601ad45a79cc78278f5cdb642f56f37ca48ed133c078fcb5204b537ce46591f03577ee67b84ebd10ddf803fffb26c07258
-
SSDEEP
1536:pEt5OZvpmJ6897aNsGhd6h/at89LLsDr59jVvLTf/Yw2jAe7cbysc37QV4vP:et5OnMF9/GELshHYw1e7cWsdVq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b05d34dab3469225379b787a3c2893d0_JC.exe
Files
-
NEAS.b05d34dab3469225379b787a3c2893d0_JC.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ