NEAS[.]e9b7c8e7c0034177f01a3a1cbf7a5ff0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e9b7c8e7c0034177f01a3a1cbf7a5ff0_JC.exe
Size

5KB
MD5

e9b7c8e7c0034177f01a3a1cbf7a5ff0
SHA1

3230b6c371a6cf2d1d64a7e110b3b52a77952472
SHA256

461138cd53760de94a5d9fcc7d61d0b87f6dca1a58e001b80f0fc458f26cdce7
SHA512

2a1209d258a2288b51d86a4390eb1691eaf1a972a7aaae76f67db62f5a649058759f20e2b9a9b87c787a5ed81df02ed98b59f3e1c33632cd158528677637eb9f
SSDEEP

96:ZJTnXzvokKYrl4Q4lE91Cr2Sfnb6KLp+P:ZJrXzwkfZai9+nWKLpE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e9b7c8e7c0034177f01a3a1cbf7a5ff0_JC.exe

Files

NEAS.e9b7c8e7c0034177f01a3a1cbf7a5ff0_JC.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ