NEAS[.]05643a205635682e1ed3bb1ec0584f50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.05643a205635682e1ed3bb1ec0584f50_JC.exe
Size

126KB
MD5

05643a205635682e1ed3bb1ec0584f50
SHA1

f878f8c5e1e4aabbec9ee4a52398284fe91affa5
SHA256

8f9b0412fa1e435cfdd34e5bbf08b07a56ea7eb4e898e89b4588506347e5844f
SHA512

c37ea7064658f10bc0d394d244b58c307fa67d1bdd42ace2080b3f4ea3c883c3bce61d9604a158f255376b8ae1eae36f14ae8df2417ac2ef1298fe6fcadac638
SSDEEP

3072:Fwtrib2bd4ZlkindcZ9xokP1Zp/s5jbuhNsYL:FAi9ZlkoM+0k5bIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05643a205635682e1ed3bb1ec0584f50_JC.exe

Files

NEAS.05643a205635682e1ed3bb1ec0584f50_JC.exe
.exe windows:4 windows x86

6d485d8e9c6890655089a651bccb43f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

user32

RegisterClassA
CreateWindowExA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
LoadCursorA
LoadIconA
LoadMenuA
GetClientRect
SetFocus
MessageBoxA
PostQuitMessage

ole32

CoInitialize

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ