NEAS[.]c4022ffe618e6e839aae44307fa49d70_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c4022ffe618e6e839aae44307fa49d70_JC.exe
Size

3KB
MD5

c4022ffe618e6e839aae44307fa49d70
SHA1

d2c323418a9280a120d9d0e819917504a58cc099
SHA256

af0664f3e1fd67fc724aef7619e5dc49f50f5307dad6edf8d022d3de885a1a50
SHA512

72b9b982fa47b16b5d5c233f73c0424cb6565ab33950eb61a135b1e2b79ecff64610600bbf8988e5d0607c0fb97c77ecc1b7af24ca62c40fa56bb5d75919e115

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4022ffe618e6e839aae44307fa49d70_JC.exe

Files

NEAS.c4022ffe618e6e839aae44307fa49d70_JC.exe
.dll windows:5 windows x86

beba03bbad1f8d79d5b3c1359e913e0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpW
GetModuleHandleW
CloseHandle
Sleep
CreateThread
GetCurrentThreadId
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc

user32

DestroyWindow
SetWindowLongW
GetWindowLongW
SetWindowTextW
SetDlgItemTextW
DispatchMessageW
PeekMessageW
WaitMessage
IsWindow
CreateDialogParamW
ShowWindow
AttachThreadInput
IsWindowVisible
wsprintfW
PostMessageW

Exports

Exports

destroy
getWindow
show

Sections

.text
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ