NEAS[.]8abb589342e80f42291c70505ee88fd0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8abb589342e80f42291c70505ee88fd0_JC.exe
Size

222KB
MD5

8abb589342e80f42291c70505ee88fd0
SHA1

c34485d11b97508c1f8f2360793d1206685f81dd
SHA256

296bcdf2cecd24b067fe260112bc7a8549c401e2b844abc437a37e4fd5fda102
SHA512

0922d043cd2f1e6e273023c926eae1ec8b852b274a88b218d0b3828226c31a64ee02810c3af1162925530ef278aa0d05d6ec665ead5f840c58e5ce3db015c249
SSDEEP

3072:8R4jdNqTqHLklZpb4RrRDFBI/cMrnTS4y3NkEjbvjuC8xVkxRQjZ3phRrbX9gmQD:aafcEHI/prnm4y3NjTjuC8xOcxphsmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8abb589342e80f42291c70505ee88fd0_JC.exe

Files

NEAS.8abb589342e80f42291c70505ee88fd0_JC.exe
.exe windows:4 windows x86

3e3d633779e35448851e7a9ca7e72522

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoInitialize

Sections

.MPRESS1
Size: 163KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ