Static task
static1
Behavioral task
behavioral1
Sample
JMBYCCCB.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
JMBYCCCB.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEASNEASb3bae7bf690529bb28dd8a019272bbf342df07190647ca4f37c6829ecf98694dimgunknownunknown_JC.unknown
-
Size
1.2MB
-
MD5
1fca68bcf12e319867eca9db4be28e49
-
SHA1
53bef5013bccfc38b04ab2b3cbc4839e5663eb6a
-
SHA256
b3bae7bf690529bb28dd8a019272bbf342df07190647ca4f37c6829ecf98694d
-
SHA512
379de23be61f323b245cda34453eaf95c85ac69b71a5287898887d1c25550f14af0b7ef36b7ae7b9f455b78ee8b58cc6d800a3bc1a7d7fe0756faba2b62906f0
-
SSDEEP
24576:mftDrldjvpCUtIwTJPcP3YKSNiX2spAS86b:wDrlVhuwT5iX2spZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/JMBYCCCB.EXE
Files
-
NEAS.NEASNEASb3bae7bf690529bb28dd8a019272bbf342df07190647ca4f37c6829ecf98694dimgunknownunknown_JC.unknown.iso
-
JMBYCCCB.EXE.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 649KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ