NEAS[.]48870921174739209413bf1d976ba790_JC[.]exe | Triage

Sharing

General

Target

NEAS.48870921174739209413bf1d976ba790_JC.exe
Size

26KB
MD5

48870921174739209413bf1d976ba790
SHA1

1885c1e43b2898fb9760304881541dd177f128b5
SHA256

c6be9420fa9cf60b5b5691503afd506cb63d5eaad3aa415a47e2390f32b762fb
SHA512

cc416607b95cc05a43adad18fff439b371f95b6eeec10caecc74cc5e283dd231c81c01ab7d76efc51d04c272ce8b6bcbb2a507bfe54be88b9d37764094f0307a
SSDEEP

384:uu/JYSrFQjGxzfNHP151QUzMk9hBcecy44hLyG+mHDiJWs3WWST:d/3xd1HXzoy44hXPjiJx+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48870921174739209413bf1d976ba790_JC.exe

Files

NEAS.48870921174739209413bf1d976ba790_JC.exe
.exe windows:4 windows x86

1daa496caaaddcfabb11d00256706dda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
ClientToScreen
wsprintfW
GetDialogBaseUnits

kernel32

GetStartupInfoA
GetModuleHandleA
GetFileSize
CloseHandle
CreateFileW

msvcrt

__set_app_type
__p__fmode
_except_handler3
_controlfp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ