NEAS[.]2eff947d8deef11b7bf39acba45d12b6_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2eff947d8deef11b7bf39acba45d12b6_JC.exe
Size

303KB
MD5

2eff947d8deef11b7bf39acba45d12b6
SHA1

8d46e0f4b94a977995e75a966d6ae74ce05d1119
SHA256

5dffac4fd3d3dc56c5985d28e4d285eac4e947084c32a843b44bf97e22fabde2
SHA512

9f01a854900e4e754bd671ed3edd93a2d61f91b8fe3eb7822bd42a459a8f3fadb4a8ff07c42e7457ac1e9f2eb325fde6d9794c77126eb12ab308119317866131
SSDEEP

6144:KyQ9/6EvqGwTV2qZcDJphestvyiucHU2fth8ZQtNope1t:pQ9HS94q6Dom/7HUqtCZKX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2eff947d8deef11b7bf39acba45d12b6_JC.exe

Files

NEAS.2eff947d8deef11b7bf39acba45d12b6_JC.exe
.exe windows:5 windows x86

d013360fb950ce3e873279a3120f8ba6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

PostQuitMessage

advapi32

RegOpenKeyExW

shell32

ShellExecuteW

ws2_32

WSAGetLastError

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 78KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 222KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE