NEAS[.]65ca061c3cb6a7aabf0c09b289ace010_JC[.]exe | Triage

Sharing

General

Target

NEAS.65ca061c3cb6a7aabf0c09b289ace010_JC.exe
Size

42KB
MD5

65ca061c3cb6a7aabf0c09b289ace010
SHA1

f3608940b2ce3b34eef1b85e9f6c7e7fd0f57556
SHA256

dbe3570162d029a48024d276e0169c995868e6f3cf710cc8f063146008da46b3
SHA512

3e7c8985493ec50a66c18bb6e18d9182df0a13682a30deed5898eaa76ca24b8daf1250a658d0bf6f75e91bebcc4859cbcbc82b9fc74acfc68a6d6a8d113bb13b
SSDEEP

768:0ex2ZFuS3P4OjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oog+favSxf7x8qQ:0eqPjXRrs9sINeZEtejlIkoLN127BFVE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.65ca061c3cb6a7aabf0c09b289ace010_JC.exe

Files

NEAS.65ca061c3cb6a7aabf0c09b289ace010_JC.exe
.exe windows:4 windows x86

7763b13757a016b5cb5406899f818c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

ReadFile
GetModuleHandleA
GetFileSize
CloseHandle
VirtualAlloc
CreateFileW
lstrcpyW
GetStartupInfoA

wintrust

WinVerifyTrust

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ