NEAS[.]0c8def0a595e7790a9361fa30ae8b520_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c8def0a595e7790a9361fa30ae8b520_JC.exe
Size

37KB
MD5

0c8def0a595e7790a9361fa30ae8b520
SHA1

45be56fddc417fec7296a6dc06d823567f1b251a
SHA256

1ccf70f68031f55a72dab72eaecae37e6a19982d6d520d9893aac9f187701169
SHA512

98acd5bcebfc52ae3632840e91bda2d13b19079cd181794f924b1326260e59b8707b5d68c6661bcabc186df5c22de06f26b5f21f05b37c7757895b3c85268f34
SSDEEP

768:XgQkYItDn0dXfeGXHizJq4sZN18pXvnemTrIavNrLg87sBJl:w/RVnSX2GCJqtDeeOIah98l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c8def0a595e7790a9361fa30ae8b520_JC.exe

Files

NEAS.0c8def0a595e7790a9361fa30ae8b520_JC.exe
.exe windows:4 windows x86

95509c7785bea1420c6c0be56b5f50d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc

user32

GetWindowTextLengthA
GetParent
SetParent
GetTopWindow
GetLastActivePopup
ShowWindowAsync
AnyPopup
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE