NEAS[.]353619b4b596716dd2d336a22880d4b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.353619b4b596716dd2d336a22880d4b0_JC.exe
Size

21KB
MD5

353619b4b596716dd2d336a22880d4b0
SHA1

856b3b298a94eb57eb3bc6fff7787b3087d0b4f4
SHA256

6590fb43bd538c7a8036753094d61b91ade900d9d37a14bb02af617d701f9dfd
SHA512

361fa038ddf1d0c981fccc07a1479cc657d99f3615c4ceea0e2743e3318d18d8c740cd50d9824d28f8f0c699cf6a034cce0c377209377b04ef2518a68633297f
SSDEEP

384:GlfPEQR6s/CvGz5Hr33yCYpc8N/j9y9HR3K3Y:GB8Qv6veHbMN/5y9HhaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.353619b4b596716dd2d336a22880d4b0_JC.exe

Files

NEAS.353619b4b596716dd2d336a22880d4b0_JC.exe
.exe windows:5 windows x86

6f660fc4d4ccd0310dd845f5fe47652d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

LoadIconA

gdi32

TextOutA

msacm32

acmStreamOpen

advapi32

RegCloseKey

Sections

.MPRESS1
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 1011B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE