NEAS[.]41648366a32195105c8da5575a58b8e0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.41648366a32195105c8da5575a58b8e0_JC.exe
Size

1.5MB
MD5

41648366a32195105c8da5575a58b8e0
SHA1

b0958be7e291956e84a42b5b9b77bc34eecd1aa6
SHA256

26c263721d6048254dc92a33d68dc88c707a0c856d9c64b223001157814817fa
SHA512

bfd543ea3a393766e81c273e653d02c3e66cbeb22f72d30012c491e9560b8558e009e99f587abb8cc9e9b0bf3c0b1b6bf2d2795eb970de294398c9c84cda6179
SSDEEP

49152:efvQkVpNYgDtrNU8q4XnEIzwZS9YyFpEWV:UpN3VNU8q4Xn9zwZS9HFpEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.41648366a32195105c8da5575a58b8e0_JC.exe

Files

NEAS.41648366a32195105c8da5575a58b8e0_JC.exe
.exe windows:4 windows x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ