NEAS[.]17cef582496865705ff463a716634f10_JC[.]exe | Triage

Sharing

General

Target

NEAS.17cef582496865705ff463a716634f10_JC.exe
Size

3KB
MD5

17cef582496865705ff463a716634f10
SHA1

7a8344a0eac35637776b675791be0dd08c737fa9
SHA256

246e678384c0fa44f67e90eae7d1b7d5780019624e09dd4880f44173e9f09f8d
SHA512

2e08e96f0852409c3f542bb8e1c8b938d2cf89c38c15f5104519c50d413dad07c09d910a9f0139ac746839674f16ff8d4a73dbc9a4a9aa6933630abab70d806c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.17cef582496865705ff463a716634f10_JC.exe

Files

NEAS.17cef582496865705ff463a716634f10_JC.exe
.dll windows:5 windows x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ