NEAS[.]d63300e588a7f0e72cd0728895374b80_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d63300e588a7f0e72cd0728895374b80_JC.exe
Size

60KB
MD5

d63300e588a7f0e72cd0728895374b80
SHA1

e815b0acbde84360a3254c46c0b1cfdfec1e3976
SHA256

a09373a93760988fd55a7ad55bc18d3c6ac2a39bf4975e965068888eb7ab4921
SHA512

f6ffa33bfa114ad2752c58eb293fc2d72995390ad6e094d5e84a101a57159a489e4a049d14389279c7a145021d9cddb4505c56fb7c1d11ede8b00a87249d2444
SSDEEP

768:eCVMDJ5J3eXEcdgy+FSbnKD+0r1LYpzwDu+uM9MBJ2wlD+rs8:WJ5EXEc29nz6wDuXMSJDe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d63300e588a7f0e72cd0728895374b80_JC.exe

Files

NEAS.d63300e588a7f0e72cd0728895374b80_JC.exe
.exe windows:4 windows x86

2eb47895ee25649cf9e79d6e6127836a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
FillRect
GetDC
DialogBoxParamA
GetWindowRect
UpdateWindow
SetFocus

kernel32

GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
CreateFileMappingA
FindNextFileA
DeleteFileA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetLastError

gdi32

CreateSolidBrush

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 493B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ