NEAS[.]556b95a0683263bcb8669c761779f1d0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.556b95a0683263bcb8669c761779f1d0_JC.exe
Size

126KB
MD5

556b95a0683263bcb8669c761779f1d0
SHA1

2b35da61817b9a6b8b68ce2939cbb6fefb0da945
SHA256

e1f89db0509bc4d7830feb091f53183e3ffff1d5eb1c1743223b7841c7527aff
SHA512

b7ae4c87781fd0f6706ccaab7eb6bf9a0930498873415bd92c060a95b0e73ea784c6baa0f79a7782d391500b7f7d8124e5fa07d8a3e3f933a8138802b0597a3c
SSDEEP

3072:DDZAL6EgWBgUHAqHeD+hYFreeye43klfLczbwOoyP:CGE6UHJeD+hYFrebebFL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.556b95a0683263bcb8669c761779f1d0_JC.exe

Files

NEAS.556b95a0683263bcb8669c761779f1d0_JC.exe
.exe windows:4 windows x86

6ae7c36bf09b30917c36fac612dfa691

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToDosDateTime
CloseHandle
WritePrivateProfileSectionA

user32

GetCursorPos
DestroyCaret

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 241B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ