NEAS[.]05721247d4873a8ace3715870c2a35c0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.05721247d4873a8ace3715870c2a35c0_JC.exe
Size

24KB
MD5

05721247d4873a8ace3715870c2a35c0
SHA1

8ff3b9bef7a00d0ef8020160c1cc0322f396b0e8
SHA256

ad251f907bc54d89e0eb60d09184662f1afbe13cd9bb09de3299c7e262d7b50d
SHA512

23ee7e3fb7eb3242b4926ea2ded69b59617f48a9b8640442c551db18477857023c4bfe8f761b2ad73e36a480194bd8235c792ae85b3d5f85b26f2bf5173276b0
SSDEEP

384:uVRo66Q+k1XWuEWnaHCRps0gA9tB/ezBLzrnFYFTgQ9g3lpz0/:SeAaL04BLz72FTgIYS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05721247d4873a8ace3715870c2a35c0_JC.exe

Files

NEAS.05721247d4873a8ace3715870c2a35c0_JC.exe
.exe windows:4 windows x86

9e07083c3e91fb05e14984556f52f6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
GetFileSize
lstrcpynW
lstrcpyW
ReadFile
CreateFileW
CloseHandle
HeapFree

comctl32

ord17

wintrust

WinVerifyTrust

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ