NEAS[.]2113d95a3c0f45c5fa728484486204b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2113d95a3c0f45c5fa728484486204b0_JC.exe
Size

876KB
MD5

2113d95a3c0f45c5fa728484486204b0
SHA1

5700d23505660d0dcab1927acbabc98c9972effe
SHA256

28c4014db8bbb09bd2f119b8c4ce04bfad964b2c22e946de98bf5078cdfcaeff
SHA512

b05bb22c4ee8a7f71e0fd63bc44ce3bd948f8eae95176a49ebed232554aa21564da4da4257d495f4e0e80b59c344b2c1aa4ed8799c1bd90121ef122b15fbd924
SSDEEP

12288:1rjlqkdz4m5y++xu9QoDt0D1uUIz0wcg6rBpoVkGPL0YZbfUUN+GR4e0:JJ/14mw+TlB0lIYBWXJfUU0GRk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2113d95a3c0f45c5fa728484486204b0_JC.exe

Files

NEAS.2113d95a3c0f45c5fa728484486204b0_JC.exe
.exe windows:4 windows x86

40dc58f0e409a7d98d4b2b3bf5210e5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

imagehlp

MakeSureDirectoryPathExists

shlwapi

StrStrA

user32

DestroyWindow

gdi32

GetTextExtentPointA

comdlg32

PrintDlgA

winspool.drv

DocumentPropertiesA

advapi32

AdjustTokenPrivileges

shell32

ExtractIconA

comctl32

_TrackMouseEvent

ole32

OleRun

oleaut32

VariantCopy

Sections

.text
Size: 862KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE