rundll32
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.611d28afcee84804d4d1a0adc8a3c860_JC.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.611d28afcee84804d4d1a0adc8a3c860_JC.dll
Resource
win10v2004-20231020-en
General
-
Target
NEAS.611d28afcee84804d4d1a0adc8a3c860_JC.exe
-
Size
6KB
-
MD5
611d28afcee84804d4d1a0adc8a3c860
-
SHA1
914afaea9ea9de39fee91ec9e2ae55e34f649aeb
-
SHA256
0b07d4e0839f5e461184aaba120574c901a7e4133ba26d86ec6be1d860a0d166
-
SHA512
1f7dfc469843c2bf6c8bc1e9d558369fc7c408d7096de4e8d6b2e8bc2f44b88541fa36adf25ffea4f43b9979a6274e749de63af8950e3216affe0a8fa1176f97
-
SSDEEP
96:hy859x0P8MahU+RXEn/gKupJtavLiTz0MGx5we1ogf0PNI3V9LlBELQJ/SXy83R:F5oLGcZLaNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.611d28afcee84804d4d1a0adc8a3c860_JC.exe
Files
-
NEAS.611d28afcee84804d4d1a0adc8a3c860_JC.exe.dll windows:5 windows x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ