NEAS[.]fad5f80ac684488f719f9459dbb1d1de_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fad5f80ac684488f719f9459dbb1d1de_JC.exe
Size

1.4MB
MD5

fad5f80ac684488f719f9459dbb1d1de
SHA1

983c43afd57ad5044d7f2690aca59bef2f74a6bd
SHA256

24eb4381888e5811a466deeb279f1f06123aec848b631e8eb3804ac9d0a9cecd
SHA512

49790ddd228b1d3d4365dad52e98d1abd4238cd8b138d2a5d8e83d46044cc836015f3595534d0499bb892c1b5073309a952de7222cba81fc5f37e088534f4908
SSDEEP

24576:eXLDCKQkVRtcIPMuH42/0sOnPGj34Zk5x5E92EAjUVO3DXP/L+b8/jXfk:efvQkVw12cpnujYOxG9n8/jc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fad5f80ac684488f719f9459dbb1d1de_JC.exe

Files

NEAS.fad5f80ac684488f719f9459dbb1d1de_JC.exe
.exe windows:4 windows x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ