NEAS[.]02a789a538b42fbbd9947a475b541b60_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.02a789a538b42fbbd9947a475b541b60_JC.exe
Size

38KB
MD5

02a789a538b42fbbd9947a475b541b60
SHA1

9c9947e06690869c763a15adacb06a5c99025f9c
SHA256

4e296c6618f0374cadef8eb5d3b00708486fc94520755f090219c75c475f4251
SHA512

e39b3a5eb748b81ee65bfb81c3288944fbf9891f005baef58dd751e9b15dff33d8dc77500743f08feab435c195c02c8c024647509939125d459b5d3d76c1335f
SSDEEP

768:hkMDwAgjZgvCngjgPPotdgI2MyzNORQtOflIwoHNV2XBFV7JBDld7ZsBGWdaFWeZ:9kAgjZeCgjvtdgI2MyzNORQtOflIwoHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.02a789a538b42fbbd9947a475b541b60_JC.exe

Files

NEAS.02a789a538b42fbbd9947a475b541b60_JC.exe
.exe windows:5 windows x86

4af8dba28c3f384f880ddf5626b0fb67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
RegisterClassExA
CreateWindowExA
TranslateMessage
SendMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
DispatchMessageA
PostMessageA

kernel32

GetModuleHandleA
GetCommandLineA
FindClose
CreateFileMappingA
DeleteFileA
CloseHandle
GetLastError

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ