NEAS[.]3a83de36741215eb262454e259828e20_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3a83de36741215eb262454e259828e20_JC.exe
Size

29KB
MD5

3a83de36741215eb262454e259828e20
SHA1

0a0e9b92c9c26537ee879e8ecdd516c9e9a8e847
SHA256

cc456ae01d6420b7da8842f3d9f0d68bbc6e3084777eb4a0e8c84d5434e6e004
SHA512

b82da31387cf8609a83a06d93b0b17650a99bb5e14d5b4558fc627e4ca5ef736509ea6dd7f23b5859c7a98ded95ef0c53558d8d1eef391131ddf7793a6acd504
SSDEEP

384:swg9a+fFSwgE+9XgW6IfuHvLjdOjCdMitI5fuBppENm3qLxQl8HSW7BA:swg9aYfQkXdmCdMimsENm4QIFA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3a83de36741215eb262454e259828e20_JC.exe

Files

NEAS.3a83de36741215eb262454e259828e20_JC.exe
.exe windows:5 windows x86

40cfd28337d574135a64316bfef4f77d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateSemaphoreA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

user32

CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
LoadCursorA
RegisterClassA

winmm

mciSendStringA

msacm32

acmStreamOpen

Sections

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 983B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ