NEAS[.]e4b7d1d18d869e00e430caac19125de0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e4b7d1d18d869e00e430caac19125de0_JC.exe
Size

44KB
MD5

e4b7d1d18d869e00e430caac19125de0
SHA1

ac834dc650f06b52a9bace7d00c991f710658576
SHA256

e55ae654f7d1b8d95bce623f28ce6a4406da66c491964e71547833839f10ecd8
SHA512

b4a20c346081f783298131c532e1e51ab938c484b76a9b606c91be22754bfc5d76831a2216ff95026f5757c44243d3bfe3f8a8380902f838b61b978ee6698dd8
SSDEEP

768:7kCvw2oWO/gNMtbdgtuMrD1nkU2klkenkok29kTnkOnkbkCGAgxfBTO2bxAe9vNX:rvw2oWO/gNMBdgQgD1lVjU1RVKyekrt5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e4b7d1d18d869e00e430caac19125de0_JC.exe

Files

NEAS.e4b7d1d18d869e00e430caac19125de0_JC.exe
.exe windows:4 windows x86

d1b52f5b1edd3441cb1f36f9779c7fc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

DialogBoxParamA

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ

msvcrt

_except_handler3
printf
_ftol
system
__dllonexit
_onexit
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ