Static task
static1
Behavioral task
behavioral1
Sample
NEAS.084322ea65ac969f839a44e4659c0de0_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.084322ea65ac969f839a44e4659c0de0_JC.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.084322ea65ac969f839a44e4659c0de0_JC.exe
-
Size
56KB
-
MD5
084322ea65ac969f839a44e4659c0de0
-
SHA1
793f294a4aa46f319f6f903a58115ff29ea2aa95
-
SHA256
237ef8d775fb76a62fe9541e608bfb148d44a198822cc5cf827ff150517ba59a
-
SHA512
6c223c6cfdf7612b0848318e004c62487fef1932e8e99167e449441c761005f862922f76bf61e2c40dace00247649187e02f99ae0e5466f98bfcaf300926a556
-
SSDEEP
768:ZOh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfpLDPBxyQ8G4Iij+mYhT5B/2YP+M:YZ/nEkh8OTKNmLftRiJYNhr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.084322ea65ac969f839a44e4659c0de0_JC.exe
Files
-
NEAS.084322ea65ac969f839a44e4659c0de0_JC.exe.dll windows:4 windows x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
IMAGE_FILE_DLL
IMAGE_FILE_UP_SYSTEM_ONLY
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ