NEAS[.]84761debf8f347216fa0276d03e8b8a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.84761debf8f347216fa0276d03e8b8a0_JC.exe
Size

6KB
MD5

84761debf8f347216fa0276d03e8b8a0
SHA1

5565b3289fc95f6ef398a1dac0d55121bbf05687
SHA256

b10eac08c2106082d4fce154163574cd6c0a8cff93d737301510401832d53a03
SHA512

39a61819f8c41ec16b0b660deed930ddcf5d7f4ed720d9d28105a95f095bc1a9b9676e0aa01a48f9e97a17c1844990a58d3b72546d6f7df323251f2cfc5a9506
SSDEEP

192:EHRh1epplPU8qVL/ZVJgc1ML1HeMZY1J:EHRO7PU8qVL/ZVJgc1ML1HecY1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.84761debf8f347216fa0276d03e8b8a0_JC.exe

Files

NEAS.84761debf8f347216fa0276d03e8b8a0_JC.exe
.dll windows:5 windows x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ