NEAS[.]00825a96077c49be4b2c3774617a5e60_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00825a96077c49be4b2c3774617a5e60_JC.exe
Size

62KB
MD5

00825a96077c49be4b2c3774617a5e60
SHA1

9153c612ef17729ab9bb03e66127074d8f357bca
SHA256

f9dd519511de94a316fb2f02b50ab0740141810ad9e7870d61143cb523042cc8
SHA512

879a779df46c084f5cc900dfb86e7889c28abe7549add37b9034348b33d8cafc9e74da47d0fd7a03927c092d44d9956e0bed163af8c62c39028c56fdcd0c8af7
SSDEEP

1536:CUrynacwIujnf3oGVFh2vpKSEqUUNWZp2hDh:zGacgnf3oGZ2hKSgUNWSth

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00825a96077c49be4b2c3774617a5e60_JC.exe

Files

NEAS.00825a96077c49be4b2c3774617a5e60_JC.exe
.exe windows:5 windows x86

db7aa00d9f3f6676bd715ec30ce42d32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shlwapi

StrStrIA

kernel32

IsDBCSLeadByte

Exports

Exports

AssictCopL
?IsFailedLow@@YG_JU_FORMFACTOR@@U_PROGRESS_INVOKE_CMP@@IL
?LoginConnect@@YG_JU_FORMFACTOR@@U_PROGRESS_INVOKE_CMP@@IL

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.write
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.int
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.read
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ