Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4900ea4b3352a92c74955ab93f864d90_JC.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.4900ea4b3352a92c74955ab93f864d90_JC.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.4900ea4b3352a92c74955ab93f864d90_JC.exe
-
Size
15KB
-
MD5
4900ea4b3352a92c74955ab93f864d90
-
SHA1
3f65e02ce340d74172c73860a434bb5cd28eabaa
-
SHA256
361137e1ffc3ddb42f4458acae80b7931e3f2a13f2cf8840f09466ee75e84952
-
SHA512
daeadc2eb26f2fbfbeee93d46a5066425894ebfa2ac7e11dabe98b8ff045cded6693e643eb619d0b994b5a385d74b261d16ac6a26713f887ac07ce745899dc8e
-
SSDEEP
192:eCIyRO2jS4O2FO2eKh2RsO26O2PCuOCGY3O2NYTeZMPq1IL:4y9jDp7EyqZGoNYTeZMPq1IL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4900ea4b3352a92c74955ab93f864d90_JC.exe
Files
-
NEAS.4900ea4b3352a92c74955ab93f864d90_JC.exe.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE