General

  • Target

    NEAS.03f96eb21d9ee61fe996ba5f029848b0_JC.exe

  • Size

    2.1MB

  • MD5

    03f96eb21d9ee61fe996ba5f029848b0

  • SHA1

    79648d49f494214afff55d3ac4f163198f936f3d

  • SHA256

    19dafb0f04cae8e99637c72520cc5253eb3c345180c3dd2a3eabd1b71955212e

  • SHA512

    fb1ed93223d3cdee5d9524c2906516d63c6989af40b7f425c677c2e77b76d51aadf49551d9dcfaaea4e0f032fb7f8a6af8305370c583d0d8b737dcf66e1276d5

  • SSDEEP

    24576:biz+3EmgWW4Xdpbx/0yoMjwB7BE6UJoSzVuHldCMRmZpkBSzFR0aMOj:biz+y4pbx/0ygBqBcld748SRLM

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.03f96eb21d9ee61fe996ba5f029848b0_JC.exe
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections