NEAS[.]d3844caf628b9e3a7d308fd931dc3380_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d3844caf628b9e3a7d308fd931dc3380_JC.exe
Size

64KB
MD5

d3844caf628b9e3a7d308fd931dc3380
SHA1

7d415a1c69f84a147b50cbc620d226c39598dfea
SHA256

95d291753761be5bf84f8795d6a9e3ccb6a7bbd9fec64c0a080c94fa03d6a371
SHA512

d6c1d1c0e995eb28b6d8814c5f36c98ef52829acc5a9f11401b5d732a0b9d60d47a598b1b8cc8ae9ab999c70f9ea138a16e604d9e0df1a81f6e8dafa59c31c4f
SSDEEP

768:2PitRNEGtXXnZ/JudBDSstTQ75CsXr8ELAYkyt8mV82/6:RF3wDNMdoELAYkVmV6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d3844caf628b9e3a7d308fd931dc3380_JC.exe

Files

NEAS.d3844caf628b9e3a7d308fd931dc3380_JC.exe
.exe windows:5 windows x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ