Static task
static1
Behavioral task
behavioral1
Sample
NEAS.18b9a492140154c33d82deff0999db20_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.18b9a492140154c33d82deff0999db20_JC.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.18b9a492140154c33d82deff0999db20_JC.exe
-
Size
512KB
-
MD5
18b9a492140154c33d82deff0999db20
-
SHA1
059900634b4c5b046f5bb1ad32277451b0777193
-
SHA256
6b7e323ff76ea7980ba26038d609a460dd2998f2a669e54656a2b189349ae665
-
SHA512
4ce00f57d3b7a180ab23b3d435a6e498466816b550716c9327e9d99ab9d73c52362f8ce2f61101f3c16e98c6f44a3151d5bdd3ac200e66c3880f659e43da5ca4
-
SSDEEP
3072:jaN2I1rlHSfI8BD8XhWj0D+n9SLDONvyNiNTk:jiH2I8BDkhWj0DgS4Mi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.18b9a492140154c33d82deff0999db20_JC.exe
Files
-
NEAS.18b9a492140154c33d82deff0999db20_JC.exe.dll windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 4KB - Virtual size: 131B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 500KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ