NEAS[.]03e545c2a469895046bbc4f959b49490_JC[.]exe | Triage

Sharing

General

Target

NEAS.03e545c2a469895046bbc4f959b49490_JC.exe
Size

53KB
MD5

03e545c2a469895046bbc4f959b49490
SHA1

37349a79999a26257527325b6a2b2e70be4e43a5
SHA256

a697fded4d5f0bf421d70b5d3fd25cd5464fbe268b537556cf09385a5da87ea5
SHA512

38844d089f56a04e4ab190337c826dca177a8c9f2fdd97c138a088f65551150d5b603d9a2df5d5a9d0d11df6b35e5d0d8a618865f36735995b3ff9ef30bc841c
SSDEEP

768:phuYmOOi5LKSwXPsED3VK2+ZtyOjgO4r9vFAg2rqroUxrLvE:pkY795mzYTjipvF2ioUxvE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.03e545c2a469895046bbc4f959b49490_JC.exe

Files

NEAS.03e545c2a469895046bbc4f959b49490_JC.exe
.exe windows:4 windows x86

f6d3b47abe7b0b2ed1a0851cadc8d405

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
DefWindowProcW
LoadIconW
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
PostMessageA

kernel32

GetModuleHandleW
FindClose
FindFirstFileW
DeleteFileW
CreateFileW
FindNextFileW
SetFilePointer
ReadFile
GetStartupInfoA

gdi32

CreatePen

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ