Static task
static1
Behavioral task
behavioral1
Sample
NEAS.38b9da3109a1d539c6201ffbc22d8ec0_JC.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.38b9da3109a1d539c6201ffbc22d8ec0_JC.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.38b9da3109a1d539c6201ffbc22d8ec0_JC.exe
-
Size
180KB
-
MD5
38b9da3109a1d539c6201ffbc22d8ec0
-
SHA1
e04ab9c2f8ecd036413741990b3af8092261eb92
-
SHA256
bba93fc9c9b419151f72ebec900a0d7ff29f84931a175cacc4f8df123e740401
-
SHA512
b98ff6a826c7f8de0335337471078f7e8bdc0ee7487c5739e103933200f81ed779e5d466ae2daf6aafb1fc437572e0708d391354e812f2213bad2e4e6f923329
-
SSDEEP
3072:tGDSbbbbbbbbbbbbbbbbbbbbbbbWbbbbbI0GICxhAL3/+0Im3iyyhYifB8xlI:t2jPziJ8xl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.38b9da3109a1d539c6201ffbc22d8ec0_JC.exe
Files
-
NEAS.38b9da3109a1d539c6201ffbc22d8ec0_JC.exe.dll windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
curlpkg Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ