NEAS[.]39d92219c02495bab19704089389ccfb_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.39d92219c02495bab19704089389ccfb_JC.exe
Size

203KB
MD5

39d92219c02495bab19704089389ccfb
SHA1

59cb5b08d4403447c454e7ff9377033030500dce
SHA256

314d9f6fdb026e9bdbc78c1b069547ce3226df1a4d4d34ff885b6d7a83a9c2de
SHA512

f23f7b3527d11e2914c20b97beb12e8db3aab286da9b6c8d01a17b39dd1bbd4f74b3f3140dd4b69d45515dd0a38348d63c5e486b1ea056cea67044a4bcf4e446
SSDEEP

6144:Xt08Z1hbvHZ5cgFwqRDbNeXI5WZfMY10PBs7L:908zhbxq38DQZ0Y10PW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.39d92219c02495bab19704089389ccfb_JC.exe

Files

NEAS.39d92219c02495bab19704089389ccfb_JC.exe
.exe windows:4 windows x86

0b1a46baae49b60fd1eb0b159d8a5458

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
VirtualAlloc
VirtualFree
GetCommandLineA
GetCurrentProcessId
QueryPerformanceCounter

user32

GetGuiResources
GetSysColor
MessageBoxA
DefWindowProcA
CreateWindowExA
BeginPaint
EndPaint

gdi32

SelectObject
CreatePen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ