NEAS[.]67a52861d71abb068a9fd6d8973b2dd0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.67a52861d71abb068a9fd6d8973b2dd0_JC.exe
Size

50KB
MD5

67a52861d71abb068a9fd6d8973b2dd0
SHA1

0d754a72bdbe42c88758ecede1a3e877f055a89c
SHA256

c2179f0900041f84b830abc870b0528fd62d3d3b6db13d3aa1e876c12f528b62
SHA512

4082e4714e591a0689ed1fac4258df2285d861bf8211c73b786b967da27844ccb6a189c9ffab72d21853511288fb12f3af867bf96935797e36b23a9aeb41a739
SSDEEP

768:ydilTSTH3WMuvBFtTiiWR+n/3LtqLCTSbZVMomySvct/yeP3Se:VO38BTiiCe3Ltq+ebgNySCnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.67a52861d71abb068a9fd6d8973b2dd0_JC.exe

Files

NEAS.67a52861d71abb068a9fd6d8973b2dd0_JC.exe
.dll windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE