NEAS[.]518f239c0349bfbe9cf021a8938355e0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.518f239c0349bfbe9cf021a8938355e0_JC.exe
Size

47KB
MD5

518f239c0349bfbe9cf021a8938355e0
SHA1

af6d45292e27a1ad73e0177cf957162ef9b3884d
SHA256

9c780a8452da371b0296d037459ab2fb07de973dbde4e46eda216af081007f3a
SHA512

3081480d8a8f58e206d72eeb8b6c8adc00244b5938a9b730dd5d68ab063c302bc426ee2c8670e294eb5549dc8c6e60222b22dc7844a7faf458ab3d2f47fa36d9
SSDEEP

768:yq2H2dH1gdFz2HT0felqWppHDV0pDpSAD8dMoBCRCvJ:iu1gdFs0Wlq8DJAD2rkQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.518f239c0349bfbe9cf021a8938355e0_JC.exe

Files

NEAS.518f239c0349bfbe9cf021a8938355e0_JC.exe
.exe windows:4 windows x86

db5fd9e8315faca9ea5a8b8724a5c081

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA
SendMessageA
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
LoadIconA
RegisterClassExA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA

kernel32

lstrcpyA
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetCurrentDirectoryA
FormatMessageA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetCPInfo
LoadLibraryA
GetModuleHandleA
GetProcessHeap

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ