NEAS[.]7c317b40256d6dccdde551e8f4e42570_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7c317b40256d6dccdde551e8f4e42570_JC.exe
Size

28KB
MD5

7c317b40256d6dccdde551e8f4e42570
SHA1

539b1976e954c7b0044f880aaf9ad556afc0f6cb
SHA256

ad81e1830b4eb04420c2f711e6b356720de7f7be45f17d5f80a0b3e956f56f26
SHA512

264b352f41778c193bdc45e29c77d7036d66bf23d6062ffcbb30ad3817b38923de837fd96177464635e7eb517021365d819cc8974ede70777c4eb30702c44b9f
SSDEEP

384:um0RCJpJgLa0MpqC/nq1bINzKknZBpTG+dinKLk+/XjSCDDMI8tcFC:LfgLa1Fnq1c9KEZ3YKLk+/XjSCHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7c317b40256d6dccdde551e8f4e42570_JC.exe

Files

NEAS.7c317b40256d6dccdde551e8f4e42570_JC.exe
.exe windows:4 windows x86

54ca733c00f525cb21425b023407aeeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
RtlZeroMemory

user32

wsprintfA
CloseClipboard
DialogBoxParamA
EmptyClipboard
EndDialog
GetDlgItemTextA
LoadIconA
MessageBoxA
OpenClipboard
SendDlgItemMessageA
SendMessageA
SetClipboardData
SetDlgItemTextA
SetTimer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE