NEAS[.]37ca739a80c6be66b04a96111092bef0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.37ca739a80c6be66b04a96111092bef0_JC.exe
Size

52KB
MD5

37ca739a80c6be66b04a96111092bef0
SHA1

3f34e9ea005d72d744790bb292b4ebb00f1b58f7
SHA256

4bda548efdce286c6cf5fe7ddccef037e4e9b0a33d66b6e26ee2479028eaddf6
SHA512

c5991d1f930636dab80b79fd90c25ff135da12bfb3038724c89595cf8d0e0e63a9e5121f9ce056ee67b0bbfff77e0f5ded853709a9360cbda1a281b98aeb44fb
SSDEEP

768:kIv7gX8D0+H/l8X6noN7DSlhVtQZsQ/TTiZT3GJhKa+wl:kSPNKqo0lhVtWsQ/T2Z8Kcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.37ca739a80c6be66b04a96111092bef0_JC.exe

Files

NEAS.37ca739a80c6be66b04a96111092bef0_JC.exe
.exe windows:4 windows x86

c8f09285f23cecc71913880c632b307f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

gdi32

DeleteObject

comctl32

InitCommonControlsEx

shell32

DragFinish

crtdll

exit

Sections

.MPRESS1
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE