NEAS[.]3af05bf6a312bb4017a0e53cf280e6e0_JC[.]exe | Triage

Sharing

General

Target

NEAS.3af05bf6a312bb4017a0e53cf280e6e0_JC.exe
Size

6KB
MD5

3af05bf6a312bb4017a0e53cf280e6e0
SHA1

48cb24cbd922dc311bb8c45b5e9f74e9399ded76
SHA256

60fa33dd9ed8d8219b0d2c974509f1d6d8c7e1681c0c58b7efb6b51a8b313462
SHA512

b96bf1e900e25b4f797bc2aa1976b1f2210697796ded703be4f898db80e6a1c21c90b171efc4aca1394fe48098eedf909cfbd9629a65f9da33d24dc40793e3c8
SSDEEP

96:hy859x0P8MafUuBGunsyHi/ss6ezS2at97xW5hDiv1t:F5oLcBGfyC+7u59i9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3af05bf6a312bb4017a0e53cf280e6e0_JC.exe

Files

NEAS.3af05bf6a312bb4017a0e53cf280e6e0_JC.exe
.dll windows:5 windows x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ