NeonsChatboxPresence[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NeonsChatboxPresence.exe
Size

35KB
MD5

2bb5919c43c4dfa6d40ed3f360d2e7c4
SHA1

e996aa9ded81b15d7a7eb5bbdaa69806875b2ec4
SHA256

ee07e4b6bd9d63ae64bbd2a1b4f64c81b2adee54cac29c74c067e03523be153c
SHA512

bf64f85fe1bc947e21a4ea519b2c2829208d0eb8ae6454d94efa48308a215c172b1667805e25001d557ce94539668bd68bf82340ac1b42366e9875a8cfc564f5
SSDEEP

768:U+k3paDNbTDc2Yz7P2ndhXipNfAZPmQQ1w1L3XXObb:tUaDZc24Sn7ebb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NeonsChatboxPresence.exe

Files

NeonsChatboxPresence.exe
.exe windows:4 windows x86 arch:x86

Password: P

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ