NEAS[.]33bcdce3131f52d7ec7d050d2f4bbb80_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.33bcdce3131f52d7ec7d050d2f4bbb80_JC.exe
Size

82KB
MD5

33bcdce3131f52d7ec7d050d2f4bbb80
SHA1

1dc8438cf13d5f0e4435f5e349b379aec1b96acd
SHA256

1bd430163a460d94af1efbd5af446cc2275a06ca35370e4542d8a005849cc0c3
SHA512

023f7fb621211820be36f8439dd8948c9434db5447c9ddf7f8b13c42786b5630542451578c74acd30ea869e8712c60e40981c2579125e293dd97d493d4e0ac0e
SSDEEP

1536:n2NNyGkHjkDzELuOt1Qz36qBnzxF/3YcacsE1RW/ZksJp+w2:nuAGWIz86zxt3EcRGSypr2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.33bcdce3131f52d7ec7d050d2f4bbb80_JC.exe

Files

NEAS.33bcdce3131f52d7ec7d050d2f4bbb80_JC.exe
.dll windows:4 windows x86

b09e9d40faacccc80f5064ec04df674b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_vsnprintf

gdi32

GetDeviceCaps

user32

GetWindowRect

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 15KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE