Static task
static1
Behavioral task
behavioral1
Sample
NEAS.182b8e9ce982978d00ec5a8e3bfd07c0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.182b8e9ce982978d00ec5a8e3bfd07c0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.182b8e9ce982978d00ec5a8e3bfd07c0_JC.exe
-
Size
428KB
-
MD5
182b8e9ce982978d00ec5a8e3bfd07c0
-
SHA1
9fcca7ff390b96e6f9e5d4e2777daa4e747f3dfa
-
SHA256
219ccaae5025178482c15fc67d6f11abf143e8940d416cd7fc67c7598388e67a
-
SHA512
096075814eb55b043fdc225e1791adbb44e8a0ec5b8ae3c7e547bc4ea77d6f6971f4763e2a5b2dd8f07d54fd1a93fee53f3b2e0441d7b6777ccf32a33dcefb05
-
SSDEEP
3072:W5GqnCvETFw5HNQ+QPcGLFDMgFL8vLl4VNUhXWzRfel4zu2Yj3Ovo/ElhHIfg1QH:TqCv+RFLOSVNU5WzRfS4zu2JHIfg12
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.182b8e9ce982978d00ec5a8e3bfd07c0_JC.exe
Files
-
NEAS.182b8e9ce982978d00ec5a8e3bfd07c0_JC.exe.exe windows:4 windows x86
5b8c48b639070e2f1b9fabb85cc8368a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
winmm
mciSendStringA
kernel32
ExitProcess
SetEndOfFile
GetLocaleInfoW
CreateFileA
SetStdHandle
ReadFile
InterlockedExchange
LoadLibraryA
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
VirtualQuery
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
FlushFileBuffers
SetFilePointer
WriteFile
SetUnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
GetProcAddress
MulDiv
lstrlenA
CreateProcessA
CloseHandle
lstrcmpA
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCPInfo
LCMapStringW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
RtlUnwind
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
user32
EndPaint
BeginPaint
SetTimer
SetWindowPos
SetWindowRgn
wsprintfA
DialogBoxParamA
MessageBoxA
ReleaseDC
SetRect
GetWindowRect
GetDC
EndDialog
GetCursorPos
ScreenToClient
PtInRect
SetCapture
ReleaseCapture
GetDlgCtrlID
IsWindowEnabled
PostQuitMessage
SetWindowLongA
DefWindowProcA
RegisterClassExA
UnregisterClassA
LoadImageA
EnableWindow
DrawTextA
LoadCursorA
SetCursor
GetMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
SetWindowTextA
ShowWindow
CreateWindowExA
GetDlgItem
SetDlgItemTextA
GetClientRect
GetWindowLongA
GetParent
MoveWindow
GetSystemMetrics
LoadIconA
SendMessageA
LoadBitmapA
KillTimer
gdi32
GetDeviceCaps
CreateBitmapIndirect
CreateFontA
SetTextColor
SetBkMode
GetStockObject
CreateCompatibleBitmap
GetObjectA
CreateSolidBrush
Rectangle
BitBlt
CreateCompatibleDC
SelectObject
CreateRectRgn
GetPixel
CombineRgn
DeleteObject
DeleteDC
shell32
ExtractIconA
ShellExecuteA
ole32
OleInitialize
OleUninitialize
oleaut32
OleLoadPicturePath
msvfw32
MCIWndCreateA
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ