NEAS[.]80f7f05d0613359dbc74588585897fd0_JC[.]exe | Triage

Sharing

General

Target

NEAS.80f7f05d0613359dbc74588585897fd0_JC.exe
Size

4KB
MD5

80f7f05d0613359dbc74588585897fd0
SHA1

215ec9a7ecff4a4984b8a258d79f727420d43760
SHA256

a584c094bbcdc7d026180c0a0d335027d35a55b0f6849ca0d1f286e699feab70
SHA512

6b6f328155dee29cc9daf27e4877ee1c1d53baf483af98b085639413b9e5f3c20e15d7f9053a04fca75d00003c6c07301d93ec52b1ea9c8e56dbafff571026bb
SSDEEP

48:SWkO0IoyTnXz+ihZjokUtJucfhD29qnrzZ7G2B3xjz:ZJTnXzvokS7GYv5z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.80f7f05d0613359dbc74588585897fd0_JC.exe

Files

NEAS.80f7f05d0613359dbc74588585897fd0_JC.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ