NEAS[.]af8bb0c80ea7eec52422742d3c32f5b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.af8bb0c80ea7eec52422742d3c32f5b0_JC.exe
Size

5KB
MD5

af8bb0c80ea7eec52422742d3c32f5b0
SHA1

ead16bfbb0c1cbf5f92e13f56fa45fe43e6dc562
SHA256

15d168727a9a1f87d95cebe944920c3a7808488f19d67c2c2993ffc7eb870f44
SHA512

778f1c36955ab721c896885bf2593d4f85f5a48f51bca03273522eb41efdcf32ebc2a155f65b891df3985819722c8a929e2c5ac35b6fdb275574c7ddbaebc029
SSDEEP

96:hy859x0P8MawKiV1aaMEJ15BaG95Gr8f3JvP/ESarCzNSAg6ZvGn:F5oLlKiV1aaMEn5BaG95Gr8f3JvXESa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.af8bb0c80ea7eec52422742d3c32f5b0_JC.exe

Files

NEAS.af8bb0c80ea7eec52422742d3c32f5b0_JC.exe
.dll windows:5 windows x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ