NEAS[.]0498d33d42475621d359963b6d48a460_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0498d33d42475621d359963b6d48a460_JC.exe
Size

839KB
MD5

0498d33d42475621d359963b6d48a460
SHA1

64d13455b91a4f7d5b917f897ad97425f4b982a2
SHA256

6a169063d5f4184a940a6db7b45d2b34085320ac3be198a347d7c0f02352ceb6
SHA512

cb3e1b18015a7f146e602d7ee53850c47a6e7136fc7ac8c28aa062d73913961eb42622c390447b5d5a6a5ee558164dc4df10efcbef1270d6b02240bdc02dc2fe
SSDEEP

24576:yJpUqp748VzjQvSyk/8GtfnA4375hZir4zcmSvj:a+qt48VvZj/JvNh44zcmMj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0498d33d42475621d359963b6d48a460_JC.exe

Files

NEAS.0498d33d42475621d359963b6d48a460_JC.exe
.exe windows:4 windows x86

7816932b5694233f05856766e37e752e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
CopyFileW

ntdll

RtlSetGroupSecurityDescriptor

user32

LoadMenuIndirectW
GetFocus
SendMessageTimeoutW

Sections

.text
Size: 832KB - Virtual size: 836KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE