NEAS[.]9c4547a09cf233ff579e234e916a8d00_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9c4547a09cf233ff579e234e916a8d00_JC.exe
Size

12KB
MD5

9c4547a09cf233ff579e234e916a8d00
SHA1

97830912a1f0fcfb394f77beaab79b11f67ec611
SHA256

d0f05a6c19fec7d3a3da5afac40b01c6d8b78000ce6ec2d712d1437f491ef469
SHA512

f92643f22921bddf9863b21902c3a83b94b5cf6631590585f88b9574fdb5ad40f95e903683f7b33fa99296b2efb69b92008271807e14a33c38f9e9f076310639
SSDEEP

192:hzVk2NfVb7/n5EONrIxgKvS0uVeYZVBqP3KE/:3dBd7/V+7vaVeYVA3l/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9c4547a09cf233ff579e234e916a8d00_JC.exe

Files

NEAS.9c4547a09cf233ff579e234e916a8d00_JC.exe
.exe windows:4 windows x86

6c2cdb42bc8b5c8852889a7a1965c281

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
PostThreadMessageA
MessageBoxA
DispatchMessageA
LoadStringA

kernel32

FreeResource
LockResource
GetProcessHeap
HeapReAlloc
GetCommandLineW
GetModuleHandleA
lstrcatA
FormatMessageA
lstrcpyA
LocalAlloc
LocalFree
WideCharToMultiByte
CloseHandle
lstrlenW
HeapAlloc
GetCurrentThreadId
CreateThread
WaitForSingleObject
LoadResource
SizeofResource
FindResourceA
GetLastError
ExitProcess

ole32

CoGetClassObject
CoUninitialize
CoInitialize

oleaut32

SysStringLen

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ