NEAS[.]2879f32957f338d23147177ae460fc20_JC[.]exe | Triage

Sharing

General

Target

NEAS.2879f32957f338d23147177ae460fc20_JC.exe
Size

34KB
MD5

2879f32957f338d23147177ae460fc20
SHA1

96e668c6f299393fb2452afffc52ce9465e80532
SHA256

77e899a9488434b79d44e39b1675b2bb9f93796527c4bead3637260a6bead938
SHA512

eef880f014a1faa9c95eb733536bfd831c582a52e1b7d7564557af2aca65983392412600ac56558648776b6af5981b2674f20364267ee6bd2a141777f395b4ab
SSDEEP

384:/kfug6zwgQP4J3390scAVP9IhX7Q/alFg+7NcCsiSf1iW3wKjDzklax07:cXYGtuGh55BxSdtwjlH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2879f32957f338d23147177ae460fc20_JC.exe

Files

NEAS.2879f32957f338d23147177ae460fc20_JC.exe
.exe windows:4 windows x86

cf17f374bd7a8f43d6e138239cb71808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
PostMessageA
MessageBoxA
EndDialog
GetDlgItem
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
SendMessageA
DestroyMenu

kernel32

GetModuleHandleA
CloseHandle
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ