NEAS[.]fc12890c3416402df14d56e5ff1b4450_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fc12890c3416402df14d56e5ff1b4450_JC.exe
Size

5KB
MD5

fc12890c3416402df14d56e5ff1b4450
SHA1

65fd7c37b9b6a1e378b5e218dd361e6074afbd9c
SHA256

567b6c60d5a3f4154786cd0306e9fb23aa09cc309486382bde14a26dc7adc457
SHA512

d30a1c2fb174cf7f303b1cb5a2086a94906d6a5528acc8ade4747da37c232705e97843430689cd2a9d61df74afd4eda4ddd2dfaf802c880681db1ac44f188140
SSDEEP

48:SWkO0IoyTnXz+ihZjokE1ZIZ6ktkyJ5rMIsOhTzCWxy+cP09on9ppPqqHAXD:ZJTnXzvokE1ZIZ6Olj/Zhy+hiPPRHAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fc12890c3416402df14d56e5ff1b4450_JC.exe

Files

NEAS.fc12890c3416402df14d56e5ff1b4450_JC.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ