NEAS[.]e5f77d0b2a7ab19ca9b22c2bb814f810_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e5f77d0b2a7ab19ca9b22c2bb814f810_JC.exe
Size

40KB
MD5

e5f77d0b2a7ab19ca9b22c2bb814f810
SHA1

82a7707c9a2d2d45e57d205734491d8175c60ac8
SHA256

4f675a9063008d00073a1c6bbd1c61a23768ccd080126849f5bea3dc8302eaaf
SHA512

568d5bf813f0e35c84e44dc4b5c56ea017bd73c1c3e502cbbb5b0d7ad0303f835e2011b3e3a9ee02af5a9b6f0a982f7ba12ddc90427e7e926af3600c1138f390
SSDEEP

384:u+UuN1kg7x9WHkYK5t24pttObGwl+Yq2M+cn5zI638GkznJCgbYsq+rULUIjgH55:euN+gX55V7gbGy++cnk3Z1FCgq/4wVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e5f77d0b2a7ab19ca9b22c2bb814f810_JC.exe

Files

NEAS.e5f77d0b2a7ab19ca9b22c2bb814f810_JC.exe
.exe windows:5 windows x86

1ff5f432434633aab8fc15061ce55a13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

ExitProcess
CreateFileA
GetModuleHandleA
GetStartupInfoA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ