NEAS[.]f0706d5bc12d14601c2e6a42b8a31e70_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f0706d5bc12d14601c2e6a42b8a31e70_JC.exe
Size

6KB
MD5

f0706d5bc12d14601c2e6a42b8a31e70
SHA1

365d6b0d0db94f39c0c0f5c0b08e68eb11b473d8
SHA256

ec54e43ebf51f5a2550a5882ca4099a7514549cbc6d20dfb45f54fee4b0477e5
SHA512

70b020a6c31e537799ac68c8e580f4fa6afc2eda276b1111a24cd0d008c957c2039619521bede6831d09b747222b790847b275cb2025c6fa56e5976844d6e8f7
SSDEEP

48:C6VonAHso6U7lYa92RrpjwDmetlG95hx+iMHhazKTZUfEvk+X730+XQsMe:nEY2RrF1eqwi4wKNUfmrX7k8Me

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f0706d5bc12d14601c2e6a42b8a31e70_JC.exe

Files

NEAS.f0706d5bc12d14601c2e6a42b8a31e70_JC.exe
.dll windows:5 windows x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ