Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c2c8ff8c24e8379626734dcd6764fe50_JC.exe
Resource
win7-20231023-en
General
-
Target
NEAS.c2c8ff8c24e8379626734dcd6764fe50_JC.exe
-
Size
315KB
-
MD5
c2c8ff8c24e8379626734dcd6764fe50
-
SHA1
a777eccac8ae59aa90eed57832891a9a913108a8
-
SHA256
3b80ed3f01eb04a9358f4ceb9de7ecf55f93295f6d400ddd95c4d7928be1f14b
-
SHA512
64308375c27bf5b52e5a4c219478344cd16b56fd3a34f3a8902d8684d67d8addccb56a5f2ef0fe4e0813cec9fd8648303cd77883deaeacd196f6176630a6addf
-
SSDEEP
6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4Oib:BVAWNDTJHq9DIMTW8c1ib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c2c8ff8c24e8379626734dcd6764fe50_JC.exe
Files
-
NEAS.c2c8ff8c24e8379626734dcd6764fe50_JC.exe.exe windows:5 windows x86
3b3ca5844bdb8b6b333c1e673e18f1c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
gethostbyaddr
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
IOKGDTTY Size: - Virtual size: 488KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 309KB - Virtual size: 312KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE