NEAS[.]035abdda29111d251830dc93156eea70_JC[.]exe

General

Target

NEAS.035abdda29111d251830dc93156eea70_JC.exe
Size

33KB
MD5

035abdda29111d251830dc93156eea70
SHA1

8dbb362433523a491b2c2bef614b49ae6d6f037f
SHA256

2b4e196c792f1e8c1ee6f358e8b4bfab67a3e76523f2ef862c0a459a07557e07
SHA512

830bf72a5f72640be432cbcd8138a9c56b938b16f835d8d4348cd5501a986a6b5803b558264e525a347f6c50b233024fbb09e572359c903d54b94a36c6edc36b
SSDEEP

768:9GL6qNK3pnlrBwNIcg3IkR+fASK476LHzLArIsHKhApywERBiy:M6k6/rf1QAD4ujzLutqhApywwBi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.035abdda29111d251830dc93156eea70_JC.exe

Files

NEAS.035abdda29111d251830dc93156eea70_JC.exe
.exe windows:5 windows x86

eba892da2a3c34a21c22c5c5f8316da7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit

kernel32

GetModuleHandleA
MultiByteToWideChar
SetErrorMode
LoadLibraryW
GetProcAddress
GetCurrentThreadId
FreeLibrary
GetStartupInfoA

gdi32

GetStockObject

user32

SetTimer
CloseWindowStation
GetProcessWindowStation
PostQuitMessage
SetProcessWindowStation
OpenInputDesktop
OpenDesktopW
DestroyWindow
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
ShowWindow
RegisterClassW
CreateWindowExW
OpenWindowStationW
KillTimer
MessageBoxW
GetFocus
LoadStringW
SetThreadDesktop
CloseDesktop
GetThreadDesktop

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qhauqgb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eba892da2a3c34a21c22c5c5f8316da7

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

gdi32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 120B

.rsrc Size: 28KB - Virtual size: 29KB

qhauqgb Size: - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 120B

.rsrc
Size: 28KB - Virtual size: 29KB

qhauqgb
Size: - Virtual size: 4KB