General

  • Target

    NEAS.9d49ed9b529a540a3b12d4f29a28f3c0_JC.exe

  • Size

    72KB

  • MD5

    9d49ed9b529a540a3b12d4f29a28f3c0

  • SHA1

    50042e61bda351230470288525cbb7d65f19097d

  • SHA256

    dd8f0ad45115268a0b43faddea0e0455b8002caa9d1ecfa29b9334a3469b71dd

  • SHA512

    0a53be412362be553ddf8191e94d1ebbc83e7ab7bec125ee6f953850c37a6ea5d5962d31b896c10eecd378c7723951fd89ff491e15f8651d05e5e184f521d3c7

  • SSDEEP

    1536:ITGtI5bkStPB9uCsWLB5iYVvIIVRKTMb+KR0Nc8QsJq39:GG+5bkStPuVWLRf6Te0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.9d49ed9b529a540a3b12d4f29a28f3c0_JC.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections