Static task
static1
Behavioral task
behavioral1
Sample
Jeez.ArAp.Data.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Jeez.ArAp.Data.dll
Resource
win10v2004-20240426-en
General
-
Target
Jeez.ArAp.Data.dll
-
Size
155KB
-
MD5
39c7f8a838ac0b169cb2d13b5102f718
-
SHA1
45ef7ad8023fb33bf5274976142f42b8964ad2b2
-
SHA256
696017af18cdfba8f7bc1675733710d9ef614108007499a69ef043a979198b47
-
SHA512
f97b9428f636986f7f3d455e8a5525c7af3ffe186b156d22e106e6ae7ce80f73606843693c73bef6df83c7b39682447e49212a6ed64b84ad4cf7e3c2fc0a7c84
-
SSDEEP
3072:q7x4gjUGna1HSIP/dXu2Tl5mTNJqx3Cqn6jd5M1EM8esQGJBXp:x3Cqn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Jeez.ArAp.Data.dll
Files
-
Jeez.ArAp.Data.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ