NEAS[.]5c501313678f2ed35a24de6e37abcd80_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5c501313678f2ed35a24de6e37abcd80_JC.exe
Size

2KB
MD5

5c501313678f2ed35a24de6e37abcd80
SHA1

6006fe16a262b08094e181ee5b5acd3e6aabe98e
SHA256

e57043500d4fd8d16fb26bb8e5d3c3a7123b9c8ef8df46e15df7afe9f992730c
SHA512

f5ccc882f6432bcd54a9954b70bc11b72cd63c69870945f8e994109e4f132322f38c1194d472f83f7dba809b8fd471b2705193730b4889cafce81ea29dec0fb7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5c501313678f2ed35a24de6e37abcd80_JC.exe

Files

NEAS.5c501313678f2ed35a24de6e37abcd80_JC.exe
.exe windows:4 windows x86

df6b494706896a1484fc10592a66f4c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateRemoteThread
CreateSemaphoreW
WinExec
ExitProcess

user32

CharLowerBuffA
BringWindowToTop
CheckDlgButton
CheckMenuItem
CharPrevW
CharToOemA
CharToOemBuffA
CharToOemBuffW
CharToOemW
CharUpperA
CharPrevA

shell32

CommandLineToArgvW

Sections

.text
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE