Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4d4916a25ff8009504ba6dd45221e1b0_JC.dll
Resource
win7-20231023-en
General
-
Target
NEAS.4d4916a25ff8009504ba6dd45221e1b0_JC.exe
-
Size
120KB
-
MD5
4d4916a25ff8009504ba6dd45221e1b0
-
SHA1
478b61fe4305d55393b2ba5c81a451aa04cc8fad
-
SHA256
1ee99e2349d50db3fadaad51fc635114257025d6abbe41f8194321a395560c04
-
SHA512
0b72e406f79787e95806f9d696f4908ddeaa3e73a7d1620492b8778de5bdd735d58a3e92ad16cc56a3a617a54e790c363cd5f20101a985bd4d99cb55fac53700
-
SSDEEP
1536:XMDo5SVuvNHVcqlT3i1qG3Ivs2r47Xzio/pxLhfdYzCfsmzU31VoGsM:X3U+IzIE20nf6zNmg3zrs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4d4916a25ff8009504ba6dd45221e1b0_JC.exe
Files
-
NEAS.4d4916a25ff8009504ba6dd45221e1b0_JC.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ