LoadEnvi
MemoryCopy
WndProc1
WndProc2
WndProc3
_WndProc1P@16
_WndProc2p@16
_WndProc3p@16
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.741187c2ba5ce9c90094e792653129c0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.741187c2ba5ce9c90094e792653129c0_JC.exe
Resource
win10v2004-20231020-en
Target
NEAS.741187c2ba5ce9c90094e792653129c0_JC.exe
Size
4.2MB
MD5
741187c2ba5ce9c90094e792653129c0
SHA1
b2516e8b606c5d029fe4dd6321f820a12733c8da
SHA256
90dec0016c44fb7f2cb4dd456fbdff9b341be293250af9912c793aa7ce33b806
SHA512
69335d2a828ba6c372b15272a3fa0c65df13923a97471701b13d9a8298bd7eed5875556e8703690e785c4aabbe21fbb5de3014451be94c86db1367a51b3a8d69
SSDEEP
98304:qDlUcEUbKvcohkiqmShJ1FfWlMvyXviJyd+rfz8Zd2NpFK0ID7b:wUcivbkiqNFqeoaI+Pf/k0c7b
Checks for missing Authenticode signature.
resource |
---|
NEAS.741187c2ba5ce9c90094e792653129c0_JC.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatW
GetFileSizeEx
DeleteFileW
SetEnvironmentVariableW
GetCurrentDirectoryW
VirtualFree
GetModuleHandleW
WriteConsoleW
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDriveStringsW
QueryPerformanceFrequency
WinExec
WriteProcessMemory
CreateMutexA
ReleaseMutex
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ExpandEnvironmentStringsW
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFullPathNameW
FormatMessageA
DeviceIoControl
DefineDosDeviceW
WaitNamedPipeW
FlushFileBuffers
GlobalMemoryStatus
VirtualAlloc
GlobalMemoryStatusEx
LockResource
LoadResource
SizeofResource
FindResourceW
SleepEx
RemoveDirectoryW
MoveFileW
GetProcessTimes
SetEndOfFile
SetCurrentDirectoryW
FormatMessageW
SetConsoleWindowInfo
GetLargestConsoleWindowSize
SetFilePointerEx
QueryDosDeviceW
LoadLibraryExW
OpenThread
SetSystemPowerState
FileTimeToSystemTime
SystemTimeToFileTime
LoadLibraryA
GetFileAttributesExW
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
lstrcpyA
lstrcpynA
SetLocalTime
SetEnvironmentVariableA
GlobalAddAtomA
GetLogicalDrives
VirtualProtect
SetConsoleScreenBufferSize
AllocConsole
CreateMutexW
SetEvent
GetFileSize
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualQueryEx
GetThreadContext
SetThreadContext
VirtualProtectEx
EnumResourceNamesW
FileTimeToLocalFileTime
WaitForMultipleObjects
ResetEvent
GetLongPathNameW
GetShortPathNameW
GetVolumeInformationW
SetVolumeLabelW
CreateHardLinkW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
GetTimeZoneInformation
TerminateThread
GlobalDeleteAtom
Beep
InterlockedExchange
GetACP
RaiseException
FindFirstFileW
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
IsBadWritePtr
HeapCreate
HeapDestroy
GetSystemInfo
VirtualQuery
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
SetStdHandle
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
GetVersionExA
RtlUnwind
CompareStringA
CompareStringW
WideCharToMultiByte
GetVersionExW
LocalFree
HeapReAlloc
lstrcpyW
lstrcmpA
SetErrorMode
GetStdHandle
GetCommandLineW
GetVersion
ReadProcessMemory
CreatePipe
DuplicateHandle
SetFilePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateNamedPipeA
SetNamedPipeHandleState
CreateEventW
GetProcessId
WriteFile
ConnectNamedPipe
ReadFile
GetOverlappedResult
LoadLibraryW
IsBadCodePtr
GetModuleFileNameW
CreateJobObjectW
AssignProcessToJobObject
ResumeThread
GetExitCodeProcess
TerminateJobObject
ExitProcess
GetModuleHandleA
GetProcAddress
CreateDirectoryW
FindNextFileW
CreateFileW
OpenProcess
GetProcessAffinityMask
GetProcessHeap
HeapFree
SearchPathW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetEnvironmentVariableW
SetLastError
CreateFileMappingA
OpenFileMappingA
TerminateProcess
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
CreateProcessW
WaitForSingleObject
GetEnvironmentVariableA
GetLocaleInfoA
GetCurrentProcess
SetProcessWorkingSetSize
CreateThread
Sleep
GetLastError
GetCurrentProcessId
HeapAlloc
lstrlenA
lstrcpynW
lstrcmpW
lstrcmpiW
FindClose
CloseHandle
LeaveCriticalSection
EnterCriticalSection
MulDiv
GetTickCount
GetStartupInfoW
FreeLibrary
GetTempPathW
lstrlenW
AttachThreadInput
GetWindowThreadProcessId
IsDialogMessageW
GetSysColor
DestroyIcon
LoadCursorW
SetCursor
RegisterWindowMessageW
UpdateWindow
SetScrollPos
GetScrollInfo
GetWindowDC
IsIconic
OpenDesktopW
SetThreadDesktop
SwitchDesktop
CloseDesktop
GetMessageW
RegisterClassExW
DefWindowProcW
LoadMenuW
LockWorkStation
DialogBoxParamW
DialogBoxIndirectParamW
GetDlgItemTextW
GetWindowTextLengthW
GetWindowTextW
RedrawWindow
CallWindowProcW
GetKeyState
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenuStringW
ModifyMenuW
GetForegroundWindow
RegisterHotKey
EnumDisplayDevicesW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
GetDesktopWindow
SetParent
BeginPaint
EndPaint
SetLayeredWindowAttributes
InvalidateRect
EndDialog
CharToOemA
UnhookWindowsHookEx
SetWindowsHookExW
GetAsyncKeyState
PostQuitMessage
CallNextHookEx
GetKeyboardState
keybd_event
RegisterDeviceNotificationW
IsWindow
SendMessageTimeoutW
CharUpperW
LoadStringW
GetCursorPos
CreatePopupMenu
TrackPopupMenu
DestroyMenu
wsprintfA
MsgWaitForMultipleObjects
AppendMenuW
MessageBoxA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EnumChildWindows
FindWindowExW
FindWindowW
MessageBoxW
GetClassNameW
FindWindowA
GetLastInputInfo
PeekMessageW
TranslateMessage
DrawIconEx
OffsetRect
SetCapture
ReleaseCapture
ShowCursor
ScreenToClient
DrawIcon
SetScrollInfo
ScrollWindow
LoadBitmapW
SetWindowRgn
CharUpperA
CopyImage
DestroyCursor
CreateIconFromResource
LoadStringA
GetClipboardData
SetCursorPos
IsWindowVisible
GetWindowInfo
CreateIconFromResourceEx
CreateDialogParamW
IsWindowEnabled
GetActiveWindow
EnumWindows
PtInRect
UnregisterHotKey
LoadImageW
DispatchMessageW
SystemParametersInfoW
GetSystemMenu
EnableMenuItem
ClientToScreen
GetClientRect
wsprintfW
DrawTextW
SetWindowTextW
GetSystemMetrics
ShowScrollBar
EnableWindow
SetFocus
MoveWindow
SetActiveWindow
SetForegroundWindow
BringWindowToTop
CreateWindowExW
GetDlgCtrlID
GetParent
LoadIconW
ReleaseDC
GetDC
SetDlgItemTextW
DestroyWindow
GetDlgItem
SetWindowPos
ShowWindow
SetWindowLongW
GetWindowLongW
GetWindowRect
KillTimer
SetTimer
SendMessageW
PostMessageW
FillRect
Polyline
GetTextMetricsW
Rectangle
GetBkColor
CreateBitmap
CreateCompatibleBitmap
CreatePen
Ellipse
CreateEllipticRgn
CreateFontW
GetObjectW
CreateRectRgn
GetPixel
CombineRgn
DeleteDC
CreateCompatibleDC
BitBlt
SetBkColor
ExtTextOutW
GetDeviceCaps
AddFontResourceW
CreateSolidBrush
SetBkMode
SetTextColor
GetStockObject
DeleteObject
SelectObject
OpenProcessToken
RegSaveKeyW
RegLoadKeyW
RegUnLoadKeyW
GetNamedSecurityInfoW
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoW
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptReleaseContext
CryptDestroyHash
RegSetValueExA
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
AbortSystemShutdownW
StartServiceW
OpenServiceW
CreateServiceW
CloseServiceHandle
OpenSCManagerW
DeleteService
ControlService
SetServiceStatus
FreeSid
CreateRestrictedToken
AllocateAndInitializeSid
CreateProcessWithLogonW
CreateProcessAsUserW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
SetSecurityInfo
SetEntriesInAclW
GetSecurityInfo
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteKeyW
InitiateSystemShutdownW
SHGetPathFromIDListW
SHChangeNotify
DragQueryFileW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetSpecialFolderPathW
DragAcceptFiles
SHFileOperationW
ShellExecuteExW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
SetupDiClassNameFromGuidA
SetupDiGetDeviceInstanceIdW
SetupDiClassNameFromGuidW
SetupDiChangeState
SetupDiSetClassInstallParamsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiOpenClassRegKey
CM_Reenumerate_DevNode
CM_Get_Parent
CM_Get_DevNode_Status
CM_Request_Device_EjectW
CM_Query_And_Remove_SubTreeW
CM_Locate_DevNodeW
StrCmpNIW
StrChrW
StrRChrW
StrStrW
StrCpyNW
StrToIntExW
StrStrIW
wnsprintfW
StrCmpNW
StrCmpNIA
StrPBrkW
LoadEnvi
MemoryCopy
WndProc1
WndProc2
WndProc3
_WndProc1P@16
_WndProc2p@16
_WndProc3p@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ