NEAS[.]4dfe402fcb72d1c9a6082cfea44fabc0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4dfe402fcb72d1c9a6082cfea44fabc0_JC.exe
Size

61KB
MD5

4dfe402fcb72d1c9a6082cfea44fabc0
SHA1

9f66e8f3dbad77c2b170c01e1343621ce9114f67
SHA256

a0d3b9ae11aba9e422f142e24ab3e580e31c30c766d8ab2af577b6a7228fd0b0
SHA512

38cb7a437e5cd383de307f05c741037a7f85ed5d49a505477db6bf44d009b4462bf04df9d9633d9d166ea84cac6ce16226c5fdfe476709f076aca5967c5c7851
SSDEEP

768:2PitRNEGtXXnZ/JudBDSstTQ75CsXr8ou0MhmieMAy+:RF3wDNMdoou0Mjery+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4dfe402fcb72d1c9a6082cfea44fabc0_JC.exe

Files

NEAS.4dfe402fcb72d1c9a6082cfea44fabc0_JC.exe
.exe windows:5 windows x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ