NEAS[.]e9569980c71fbec16520ae67e57acac0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e9569980c71fbec16520ae67e57acac0_JC.exe
Size

40KB
MD5

e9569980c71fbec16520ae67e57acac0
SHA1

313a972cf7b44009a83124bc4f8b6cad3e131bc6
SHA256

b065eff194a832cba76032e16d43d3126b2ece91172338b5e583245521d7eb75
SHA512

195758d7a4c64ecbff0f776ae4eb338a63aa6beb2e616e26ca64723f54cde14dfbb88bff3dea53feadaa0275a2f2646503be5e58cfcb296478bad01ace123749
SSDEEP

384:u+UuN1kg7x9WHkYK5t24pttObGwl+Yq2M+cn5zI638GkznJCgbYsq+rULUIjgH5J:euN+gX55V7gbGy++cnk3Z1FCgq/4wtY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e9569980c71fbec16520ae67e57acac0_JC.exe

Files

NEAS.e9569980c71fbec16520ae67e57acac0_JC.exe
.exe windows:5 windows x86

1ff5f432434633aab8fc15061ce55a13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

ExitProcess
CreateFileA
GetModuleHandleA
GetStartupInfoA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ