NEAS[.]05a5433a68192c2e68f853da7271a5e0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.05a5433a68192c2e68f853da7271a5e0_JC.exe
Size

31KB
MD5

05a5433a68192c2e68f853da7271a5e0
SHA1

39a9ab9e6e70cb32501d67c9ef627559cd8544b8
SHA256

06ccfdeea1282d74b82ea9182ba9c78a3a7152d5b0c98efd71ebef78992f7fcc
SHA512

92d1a4c7884b70ef33ff3519f5eacd0e992ec2cc3f37b5ad92dba217191bd5298f9fde9798fea8bc9a9ed1f627b73b5731e2542a5c9972084c7e8bcf0db8c809
SSDEEP

384:xiUGhG7/mdI2is9kNWKpm5YG/TsIOtLNLCBsCHFb3RK:cUQqQp8y5jwI0LNMs8o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05a5433a68192c2e68f853da7271a5e0_JC.exe

Files

NEAS.05a5433a68192c2e68f853da7271a5e0_JC.exe
.exe windows:4 windows x86

be8334f6a61dda093a2ab9b40f871a66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
SetWindowTextA
GetClassLongA
GetWindowTextA

kernel32

CreateFileA
HeapAlloc
GetProcessHeap
LoadLibraryA
GetModuleHandleA
DeleteFileA
CloseHandle
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStartupInfoA
ReadFile
FlushFileBuffers
Sleep
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ