NEAS[.]65287f030c46b92d8545ba0773146d60_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.65287f030c46b92d8545ba0773146d60_JC.exe
Size

49KB
MD5

65287f030c46b92d8545ba0773146d60
SHA1

814934107837579667d5c6ddfc01c6fd466184ff
SHA256

5b98f863fedcb668b7a968f5d792aab1f6337b87bff1ca33974a860764b0272f
SHA512

470953d7ed5dfc3ffba0f4ff3b82774790c920a2fc9dc3b5a7a7adea7aa564d6f2f35d7bf813667fbb914873e675305ced0dfeeedc470cea3c26bc2ea94704b5
SSDEEP

768:vDqYnMTOV5ZXO9o56McUyc8fHAl4MCz+VMCs:AOjXO2MMcUyc2XMCxL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.65287f030c46b92d8545ba0773146d60_JC.exe

Files

NEAS.65287f030c46b92d8545ba0773146d60_JC.exe
.exe windows:5 windows x86

5038cc1d7d4ba6ce1ebcfec67b707138

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
IsBadReadPtr
LoadLibraryA
SetLastError
ExitProcess
FreeLibrary
GetModuleHandleA

user32

MessageBoxIndirectA
SendMessageA
DialogBoxParamA
GetDlgItem
EndDialog
LoadIconA

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ