NEAS[.]04ec9da400c235f4ac0b75e5f51718e0_JC[.]exe | Triage

Sharing

General

Target

NEAS.04ec9da400c235f4ac0b75e5f51718e0_JC.exe
Size

3KB
MD5

04ec9da400c235f4ac0b75e5f51718e0
SHA1

92fa72be66858662222f89d05227aba1c5d5a2d9
SHA256

b1b6236ae69d807197c71f650ee2f1fba337acb3a5117c4431e7772ad6ae23e7
SHA512

e33ecfa5adfebae5b1022fed8b9f92a8fb764435d46e30a6c7fd99420386bf33ed79246feb40599f0578d0584c51779b7b9c0e600682533988595beedda6a041

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.04ec9da400c235f4ac0b75e5f51718e0_JC.exe

Files

NEAS.04ec9da400c235f4ac0b75e5f51718e0_JC.exe
.dll windows:5 windows x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ