NEAS[.]bfdd789cffd3355f9555cbc961b317f0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bfdd789cffd3355f9555cbc961b317f0_JC.exe
Size

35KB
MD5

bfdd789cffd3355f9555cbc961b317f0
SHA1

f7e97a13346f02019c75587c3759f9f2954abbdf
SHA256

af36049897ea09d62ee0dd5e90cbcdaec1ac649a0db8227b747790dfdbfbdd9c
SHA512

ea0ac16497f6a49075425823f4ac02a929aad865e4d5bcdd39144602b58a07a30c2537f548c464a40d131222e61f4423bd1f5b4110f3618efb77717f6ae21231
SSDEEP

768:vENQBbw04B5EEEEEEEBGEYOs5hOuIs7RG9MvRAd:veQpw04osvvRVQMvRAd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bfdd789cffd3355f9555cbc961b317f0_JC.exe

Files

NEAS.bfdd789cffd3355f9555cbc961b317f0_JC.exe
.exe windows:4 windows x86

f2991e3b8a46c6d366108327c6f7dfd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ClientToScreen
MessageBoxA
SendMessageA
GetDlgItem
wsprintfA
CreateWindowExA
DialogBoxIndirectParamA

kernel32

GetStartupInfoA
CreateFileA
GetFileSize
CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ