NEAS[.]63f5a911c8dea6ff464a7c92e3fb4b60_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.63f5a911c8dea6ff464a7c92e3fb4b60_JC.exe
Size

16KB
MD5

63f5a911c8dea6ff464a7c92e3fb4b60
SHA1

6653ada1769a2d811510b9ffde434e20c9207038
SHA256

6faedcc3380ba21077fbaa40a529f95239a5564c9ac394e64a1c0908d32f7f95
SHA512

a3cc45cd77a326a5f3a80d2344c7953a173efe799b93ecda1e2f122e18c34112d806b5cc728b6e244686173e0b6212bc8eb0451a57b870b5e26387e5f81357ef
SSDEEP

192:zue/ytcDQRtUKeWbdMJeWtpW6FcUU1fP0/xtugTxGx:zue/0BRKKeSdnWtpWvet1gx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.63f5a911c8dea6ff464a7c92e3fb4b60_JC.exe

Files

NEAS.63f5a911c8dea6ff464a7c92e3fb4b60_JC.exe
.dll windows:4 windows x86

aa83050dec572a806e7df6c9ec540eca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

win32k.sys

RtlUnicodeToMultiByteN

Exports

Exports

CBFilterGraphics
bInitProc
bSetFuncAddr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ