NEAS[.]df0606ee41dd19450a715affa7abf6a0_JC[.]exe | Triage

Sharing

General

Target

NEAS.df0606ee41dd19450a715affa7abf6a0_JC.exe
Size

24KB
MD5

df0606ee41dd19450a715affa7abf6a0
SHA1

05ad7eae065c96c629f5e4d628f9f17098dd4da5
SHA256

3a703c6c82ba6b8e787eadbcb7bd09eeaab471688cf4955132922e7dc0597c83
SHA512

aa3b69430b572e61a5522945062d950f26576f993dbb88270a2e34bdb4f0e17c4906c29154afbb3e783d7830ae3676fd43e83329cbe56b598807f31be1f970b7
SSDEEP

768:19djHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8OAm++KRO2vV3dFJ9iq2+TQ:DdjXRrs9sINeZEtejlIkoLN127BFVn2J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.df0606ee41dd19450a715affa7abf6a0_JC.exe

Files

NEAS.df0606ee41dd19450a715affa7abf6a0_JC.exe
.exe windows:4 windows x86

ecf1bd3206976f3e5a517a2b934d647d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
MessageBoxW
wsprintfW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetModuleHandleA
CreateFileW
CloseHandle
GetFileSize

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ