Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9e29374036b0e6137491545d74e4dea0_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.9e29374036b0e6137491545d74e4dea0_JC.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.9e29374036b0e6137491545d74e4dea0_JC.exe
-
Size
22KB
-
MD5
9e29374036b0e6137491545d74e4dea0
-
SHA1
cb0c66b1ad1a60af6a0385277711fc231c342f7b
-
SHA256
f94dc990e275dde34e245177042c6707e9d4544f69904475556a13c3650a9bd5
-
SHA512
be71a6073ebbf997d6970c62687829abb2e360c870ac93e99abb4d0d281a7972ceed65c89304b6105a2a6a7e00007a8242f09d2064700c402fe2febc3b1aa0bb
-
SSDEEP
384:lrd1jR3l1cbELnrfjoRWwgGZJxSzHRfaF3kACcTMyt9R:NvasrfjGWW0T5alkACcnD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9e29374036b0e6137491545d74e4dea0_JC.exe
Files
-
NEAS.9e29374036b0e6137491545d74e4dea0_JC.exe.exe windows:5 windows x86
93f3c3f7fa917eec6b457a216663e185
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
PostQuitMessage
DispatchMessageA
UpdateWindow
LoadCursorW
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
GetClassLongW
SetWindowTextW
ShowWindow
GetKeyboardState
kernel32
GetProcessHeap
GetModuleHandleA
HeapCreate
HeapFree
DeleteFileW
CreateFileW
HeapReAlloc
SetFilePointer
WriteFile
ReadFile
HeapAlloc
gdi32
GetStockObject
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ