NEAS[.]116f9c1650e6b9c31ae8ed8753340530_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.116f9c1650e6b9c31ae8ed8753340530_JC.exe
Size

67KB
MD5

116f9c1650e6b9c31ae8ed8753340530
SHA1

1b10d002882c599f95f9c38865b43fbf563c811d
SHA256

fdb01afdbe7abebb957a778344a7dbd17349c9eaa855b6897ccca2e35af4b25e
SHA512

4e670a4dbba4b8b58b1e7e8706f229323ded61c471a89241306cab974dfb1f62c60b8433e561143a50322290072d4a2ece10f6a8b8c7910797e04c6949cae6c5
SSDEEP

768:YLonByjugARIqN7JD3iQ3LJHhhKEnHqYU420d8fDGr:YIHgQIqNVx3LJjn351eW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.116f9c1650e6b9c31ae8ed8753340530_JC.exe

Files

NEAS.116f9c1650e6b9c31ae8ed8753340530_JC.exe
.exe windows:5 windows x86

a624b58551b12248f78b62ae51484114

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
UpdateWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetSystemTime
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ