NEAS[.]0174be5605b1bf78d6b17c3f6e843c90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0174be5605b1bf78d6b17c3f6e843c90_JC.exe
Size

3KB
MD5

0174be5605b1bf78d6b17c3f6e843c90
SHA1

3477dea567931a32e59f0bd295a4e31981eb61a9
SHA256

c85075efa9fdd4efdb79e5d9d274b6b56236cc92d9704feb3f7e2edea8d73dd6
SHA512

60a3b199e4f1a2b577aefe807748077b5240f6c2198b714e073781d5c963ee2681e5d03cf45de0dcb334c401ec81dd2af3b9223047b6af9f733ed2e334f7f4bd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0174be5605b1bf78d6b17c3f6e843c90_JC.exe

Files

NEAS.0174be5605b1bf78d6b17c3f6e843c90_JC.exe
.dll windows:5 windows x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ