NEAS[.]82e668ec203d1a9fabcdb03a2a7515c0_JC[.]exe | Triage

Sharing

General

Target

NEAS.82e668ec203d1a9fabcdb03a2a7515c0_JC.exe
Size

36KB
MD5

82e668ec203d1a9fabcdb03a2a7515c0
SHA1

b1552fcfd2192e1a0e44c2338a5a50bf67be22d4
SHA256

508765da60e9187056bcc8f726e83acba666c276e480eb4ef4ffa286165bd398
SHA512

2f5b0c3bfa180211145c46b2b246ff0e2b623c52517ebc391f0c5099fc282daa0f4f5d1e26d4d93fd7f296f78d5af35c06f874bba1c025e1cb6a44fab0c5e048
SSDEEP

384:d/7HWFJ4a1oXAsOTMcMJEfQVXQNKN2NDX/3LoWOatcAr9JncAm9FNTVegk+fDhCL:dD2oV2AJblQRNLzFrSNTVebbH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.82e668ec203d1a9fabcdb03a2a7515c0_JC.exe

Files

NEAS.82e668ec203d1a9fabcdb03a2a7515c0_JC.exe
.exe windows:5 windows x86

3e262236e65f95b01f5c11555a1db856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ