NEAS[.]2efeaca9d535a1dc122e34390122a200_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2efeaca9d535a1dc122e34390122a200_JC.exe
Size

25KB
MD5

2efeaca9d535a1dc122e34390122a200
SHA1

b75f69d274b11baa9a752518cfd1c9425e0cf903
SHA256

04bd3d4f9b6d0e661c47f822ac9027bd763f4fe66e35b41c4da98bb4b7954e9d
SHA512

f253eeb694c3f21107a63a28ab8e049388ecd026967f66155096feafcddb52e5b53076cb7685c14ea5d87fd4884f51273bf86493089ec9029c2d57ee0b10800c
SSDEEP

768:eVHKmM0qauedykJ7BFjKcFNkZmGKA917D:eUmMyl7BFGSsZN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2efeaca9d535a1dc122e34390122a200_JC.exe

Files

NEAS.2efeaca9d535a1dc122e34390122a200_JC.exe
.exe windows:4 windows x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 21KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE