NEAS[.]bb7aaf01ca9b67b16070b27da872fd9e023d01f9a1fd9e47fd7b5ed8d5a8b753_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bb7aaf01ca9b67b16070b27da872fd9e023d01f9a1fd9e47fd7b5ed8d5a8b753_JC.exe
Size

1.8MB
MD5

f6fbc4ef7d85a13e70853a9b6c035236
SHA1

25f4c8265ed276abf3b8582b0f8bb795d385f68f
SHA256

bb7aaf01ca9b67b16070b27da872fd9e023d01f9a1fd9e47fd7b5ed8d5a8b753
SHA512

7614d8fd6660ce65f0627039479fdd726780771b4affa89504177fc3d01485e2c608929c1233b5214e2f153e6475a2beb8b703de8b28feea03b1953c15f7be66
SSDEEP

49152:xUEHNLYsy8w5oVmyhGF+d7n11UMdvLa+P6ewFBCH80UZkcD0:Qsy8EosyMF877Jjay6ewzP0UZnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bb7aaf01ca9b67b16070b27da872fd9e023d01f9a1fd9e47fd7b5ed8d5a8b753_JC.exe

Files

NEAS.bb7aaf01ca9b67b16070b27da872fd9e023d01f9a1fd9e47fd7b5ed8d5a8b753_JC.exe
.exe windows:4 windows x86

8a46d79e2a39bb29e5375a9a9b23450b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetForegroundWindow

gdi32

CreateCompatibleDC

advapi32

CryptGetHashParam

comctl32

InitCommonControlsEx

shell32

DragAcceptFiles

ole32

CoUninitialize

gdiplus

GdipFillPie

atl

ord42

shlwapi

StrToIntExW

crypt32

CryptStringToBinaryW

msimg32

AlphaBlend

oleaut32

SystemTimeToVariantTime

Sections

.text
Size: 1.8MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE