NEAS[.]02d57be145d458bb7b6b01aad0c4fb00_JC[.]exe | Triage

Sharing

General

Target

NEAS.02d57be145d458bb7b6b01aad0c4fb00_JC.exe
Size

6KB
MD5

02d57be145d458bb7b6b01aad0c4fb00
SHA1

767b3fc04b25335fcda65fddf306c0f2ac215d63
SHA256

de0c441183c270325c19c3b09c12bf6cdae707471a3591402b65119d3d7c2b62
SHA512

cca03fc2c59961709196971680d60f8e0cc22d21df9c596b94848ed04aea59b49cb7d39aa70b0ace6a7de14cd37b4917bd90ec952f1d27850748287e8ab70271
SSDEEP

96:DixZjmjtjd8jPjcZGR5TInFtn3xR5R4mTEZPjtJgxshT91UQ:unSR6bgYwlxR4mGhReQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.02d57be145d458bb7b6b01aad0c4fb00_JC.exe

Files

NEAS.02d57be145d458bb7b6b01aad0c4fb00_JC.exe
.dll windows:5 windows x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ