NEAS[.]95daf695e1e7a9f840a05acdc95aec7e7f2546905dc326df709216dae9553ab3_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.95daf695e1e7a9f840a05acdc95aec7e7f2546905dc326df709216dae9553ab3_JC.exe
Size

39KB
MD5

27e5c9219a4411427ce9f01429d14ff9
SHA1

91a6d65bb8f5e92ea263cdde38c8d234b3651095
SHA256

95daf695e1e7a9f840a05acdc95aec7e7f2546905dc326df709216dae9553ab3
SHA512

1460f016f01a326fd309194495d5a2582888ab86132f2248fb0ba5c1bebcad74fcdb55ea6805cd4eacfa99d436d165e63ea9ad0dad9e8a32144c9bd33509fd4a
SSDEEP

768:btB9g/WItCSsAGjX7r3BPOMHocM4vUUOmJ+mnW:btB9g/xtCSKfxLIcMzUwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.95daf695e1e7a9f840a05acdc95aec7e7f2546905dc326df709216dae9553ab3_JC.exe

Files

NEAS.95daf695e1e7a9f840a05acdc95aec7e7f2546905dc326df709216dae9553ab3_JC.exe
.exe windows:5 windows x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ