NEAS[.]NEASc11dbc66cfc4e2644331553ad49e994fexe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.NEASc11dbc66cfc4e2644331553ad49e994fexe_JC.exe
Size

93KB
MD5

c11dbc66cfc4e2644331553ad49e994f
SHA1

8dd39c56e1aaf4f260aa77678105dd1f7a729dfb
SHA256

1fe32ae59b15817b162fe554cfbb3695e8e6b1d3daa39ff89f0d382526a6220f
SHA512

44965edf8b5dafed6a656fdfbaa0496968c09c6bfea074e090ded3c56a1711fa8612dc80db1aada8c14b5bc8f7abccc17194e82920565efbabbfe4bf157438e9
SSDEEP

1536:gDGKAmrJAhUOxL71+nj+YM357qzkQbC/oP/xao+ZNps1QN5YU2PdoqM1gbZEx:gC4O6kQyr3Z/Q2c6s1LdGYmx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEASc11dbc66cfc4e2644331553ad49e994fexe_JC.exe

Files

NEAS.NEASc11dbc66cfc4e2644331553ad49e994fexe_JC.exe
.exe windows:5 windows x86

2242d9413477e71d3a7ebc77186bc1db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
memset
memcpy
free
rand

comctl32

ord17

kernel32

GetProcessId
VirtualQuery
GetModuleHandleA
SetEvent
CreateEventA
CloseHandle
WaitForSingleObject
CreateMutexA
ExitProcess

user32

LoadStringA
LoadAcceleratorsA
GetWindowRect
SetTimer
SetScrollRange
GetScrollRange
InvalidateRect
MoveWindow
SetWindowPos
SendMessageA
PostMessageA
CreateWindowExA
DestroyWindow
FindWindowA
ModifyMenuA
MessageBoxA
DestroyMenu
CreateMenu
SetScrollPos
SetScrollInfo
TranslateMessage
TranslateAcceleratorA
GetMessageA
SetWindowTextA
ShowWindow

gdi32

CombineRgn
CreateRectRgn

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ