NEAS[.]3c3df4701b692a97ee240638b0cbe1b0_JC[.]exe | Triage

Sharing

General

Target

NEAS.3c3df4701b692a97ee240638b0cbe1b0_JC.exe
Size

237KB
MD5

3c3df4701b692a97ee240638b0cbe1b0
SHA1

5ae0b2c28153b994b7b9f38fb62d36aa152f5abe
SHA256

2944da66e260a1bc81ed6d2d09b34bfa4c231e83c53ea792c523c70a8198954e
SHA512

8c97257e4eccaa906efffd4057a3423f590f41bf25a649a6ff074efad4ddd7b5d0f8b49f0767ed187f5fecce19344a0e8fa027a0bdd862909d6e6c000345e4d5
SSDEEP

6144:wrcbUq3HZpu7YlswXABoZJVftEZ0QYlGGL:x3HZX/XTnBCiQYEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3c3df4701b692a97ee240638b0cbe1b0_JC.exe

Files

NEAS.3c3df4701b692a97ee240638b0cbe1b0_JC.exe
.exe windows:4 windows x86

28d3f0f264ef7a103f2570959f2a35df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
TerminateProcess
GetProcAddress
LoadLibraryA
lstrcmpiW
OutputDebugStringA
lstrcpyA
GetModuleHandleW
GetStartupInfoW

user32

DispatchMessageW
GetMessageA
TranslateMessage
OpenClipboard
GetActiveWindow
FindWindowA

powrprof

CanUserWritePwrScheme

wintrust

WinVerifyTrust

ntdll

DbgPrint

msvcrt

_initterm
_adjust_fdiv
__setusermatherr
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
__p__fmode
_controlfp
_except_handler3
__set_app_type
__p__commode

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 225KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE