Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d6e82263a030e8a270816c4a9158e690_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d6e82263a030e8a270816c4a9158e690_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d6e82263a030e8a270816c4a9158e690_JC.exe
-
Size
24KB
-
MD5
d6e82263a030e8a270816c4a9158e690
-
SHA1
746c37aeaac0a1982eb9dc4c5abbfcffefa4037e
-
SHA256
632823357b8b8574224f94535356f1a888a8630703a44cf8307641fb6c3a956e
-
SHA512
95894698fde970126dbafe1c2e1c9f6dfcd0f0f1d01d3abecd179afd4b887acb21bc7e07768f0faa87a3fed63e0eb0109f11454f12d8896cb318396e34fcbf6c
-
SSDEEP
384:K5Fdqqr2xkIbPnab57Y4d59Ruv2r0GHQUUKl4v5FW7+nurZrarMGI9:K5FIq0bEPbSvK1hUTRFSPcrMX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d6e82263a030e8a270816c4a9158e690_JC.exe
Files
-
NEAS.d6e82263a030e8a270816c4a9158e690_JC.exe.exe windows:3 windows x86
e2c2d6bb448b1f4eed4acd7a2ad6301b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
SendMessageA
PostMessageA
DispatchMessageA
GetMessageA
SetWindowTextA
EndDialog
GetDlgItem
CreateCursor
DestroyCursor
ShowCursor
InsertMenuA
CharLowerA
TranslateMessage
DestroyMenu
kernel32
CloseHandle
GetTickCount
MapViewOfFile
CreateDirectoryA
SetLastError
GetVersionExA
GetModuleHandleA
comctl32
InitCommonControlsEx
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ