_DllMain@12
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.07b038d48c5f77389b1794ae72390f8f98c18c48a145098daf299e7da583437bdll_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.07b038d48c5f77389b1794ae72390f8f98c18c48a145098daf299e7da583437bdll_JC.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.07b038d48c5f77389b1794ae72390f8f98c18c48a145098daf299e7da583437bdll_JC.exe
-
Size
16.0MB
-
MD5
b2757078da63bdef6c36d6d4bff1c790
-
SHA1
d4a98e53f07449ac42cfa4cbfebae9ec62138403
-
SHA256
07b038d48c5f77389b1794ae72390f8f98c18c48a145098daf299e7da583437b
-
SHA512
ee4bb6c4ad427829fb03c298563c4fb0a9cab175f98bafd2b5293fc0911619e411947db5c99ee1629893f5ef27f86b83f3201c5d749f90b8eb3e7746f9030f4b
-
SSDEEP
393216:68Dch0Umf8Jm11Xy4jOdEZIsLlord5ps53WL/oQ+k4lrr8KA8l:68D1UpSZy4jcEFxoJD2EHL4Y8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.07b038d48c5f77389b1794ae72390f8f98c18c48a145098daf299e7da583437bdll_JC.exe
Files
-
NEAS.07b038d48c5f77389b1794ae72390f8f98c18c48a145098daf299e7da583437bdll_JC.exe.dll windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 1.1MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 214KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8.8MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 76KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 21.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE