NEAS[.]a5c0412de44b410ca9e385905b8ebd20_JC[.]exe | Triage

Sharing

General

Target

NEAS.a5c0412de44b410ca9e385905b8ebd20_JC.exe
Size

80KB
MD5

a5c0412de44b410ca9e385905b8ebd20
SHA1

7f7c7e8f6213e43036f84da8523b96f861b5d744
SHA256

b00e8af97ca4ce1016405d0b6c8eafbcd79dbd9513a717709ed1b5d9a94071e4
SHA512

d03d51874198d8edaf9906e1a233304c8aa561a241033d112e9d6a9ff785332a70a5b8af61a056d9b0de141e90d83c107294e8dbae21a6742b4ad5778619bf74
SSDEEP

1536:R+jtHytGHPxD4TQLFvY+ZmncVrAxSarxTQzOfBw:R+1ytgD4TktY+ZmncyzxTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a5c0412de44b410ca9e385905b8ebd20_JC.exe

Files

NEAS.a5c0412de44b410ca9e385905b8ebd20_JC.exe
.exe windows:5 windows x86

44e7af86d13bd689602e96dccc077d31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
lstrcatA
GetModuleHandleA
ExitProcess
MoveFileExA
WaitForSingleObject
GetModuleFileNameA

user32

CopyIcon
SetSystemCursor
LoadCursorA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ