NEAS[.]67141ccf5f4bb64ac677aa3213c58630_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.67141ccf5f4bb64ac677aa3213c58630_JC.exe
Size

7KB
MD5

67141ccf5f4bb64ac677aa3213c58630
SHA1

d29f2d701c68af7e24f1ade47046a74f02e143df
SHA256

b560d5a1c41341f90862ae533bc9e7fd33980151452697b758dbe94aa92d0c36
SHA512

a8004f41d9612405503df6cb6737e474e009329199f20b020c9a9f897cf937e32e1157dd2e3c0042be8689c6ecac55e92c8d7b681a1374ef6b197fafa13e17a4
SSDEEP

96:VM8drTtU0imwOpkQvGBgtoaOnFlyD+qAGTDjR+ap7dKde5GheTy35jp59eunXD:6M01QOHaMlytAsDIarOeOeW35J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.67141ccf5f4bb64ac677aa3213c58630_JC.exe

Files

NEAS.67141ccf5f4bb64ac677aa3213c58630_JC.exe
.dll windows:4 windows x64

5d63995d1bd61b212e35a61ebc32711a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryW
lstrcpyW
GetModuleFileNameW
FreeLibrary
FileTimeToDosDateTime
FileTimeToLocalFileTime
LocalAlloc
lstrcatW
LocalFree
lstrlenW

user32

GetForegroundWindow
wsprintfW

Exports

Exports

CanYouHandleThisFileW
CloseArchive
GetPackerCaps
OpenArchive
OpenArchiveW
PackFiles
PackFilesW
PackSetDefaultParams
ProcessFile
ProcessFileW
ReadHeader
ReadHeaderEx
ReadHeaderExW
SetChangeVolProc
SetChangeVolProcW
SetProcessDataProc
SetProcessDataProcW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ