NEAS[.]07977500127bf0d5544e8c08a70dc170_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.07977500127bf0d5544e8c08a70dc170_JC.exe
Size

70KB
MD5

07977500127bf0d5544e8c08a70dc170
SHA1

602bd86f419515e39e81220eb69677ee31f77750
SHA256

885a9ffb3e1260dda73f26789775d7f779bfa2daeab5d40eb4affe243467f3f9
SHA512

7003c4a989e15251a8a6d3ac7b7e213700119e5e8f5fabe1fc56f7a752dffced11ae401533feb4b95d690d380c501d5a59f5af17aa947ee5653dfc88a0bfb33c
SSDEEP

768:YLonByjugARIqN7JD3iQ3LJHhhKEnHqYU420d8fogdt:YIHgQIqNVx3LJjn351eogdt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.07977500127bf0d5544e8c08a70dc170_JC.exe

Files

NEAS.07977500127bf0d5544e8c08a70dc170_JC.exe
.exe windows:5 windows x86

a624b58551b12248f78b62ae51484114

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
UpdateWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetSystemTime
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ