NEAS[.]0da152c396445ab3269420e1fdb789e0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0da152c396445ab3269420e1fdb789e0_JC.exe
Size

5KB
MD5

0da152c396445ab3269420e1fdb789e0
SHA1

cc05f2ad9c40a815e1542b31e3094e8d8b836cc2
SHA256

15268edd8abbc2e5b12f52dd9d3f83bc6b30b22ff309528e9b325a0308b34372
SHA512

17f936ddb345db4e6a127fb68ff8c1a93fc0aaf1fcdbf176fae58c647f1dfc17115bb74ad452b3b57b90ce76ba8572d4bf3a0eaa673ae39bb5d764f5e50e0dde
SSDEEP

96:qT+ZKAKiUisfs9FSQt/9N9MosXpUUuM5O:qKNxrksyQtBqyiO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0da152c396445ab3269420e1fdb789e0_JC.exe

Files

NEAS.0da152c396445ab3269420e1fdb789e0_JC.exe
.dll windows:5 windows x86

b1739664e08d6f9c7ad5fbd4058e1368

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
SetEnvironmentVariableA
ReadFile

shell32

ShellExecuteA
ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

krnl

Sections

.text
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 497B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ