NEAS[.]99af8e1571edc79df78adcc61f2ece2a_JC[.]exe | Triage

Sharing

General

Target

NEAS.99af8e1571edc79df78adcc61f2ece2a_JC.exe
Size

11KB
MD5

99af8e1571edc79df78adcc61f2ece2a
SHA1

4b9090c02fea6ab773dd2ac0c0fd7c1f8a6fdb08
SHA256

079a2f1818dd133e568058df421dcf49c5bd6f075e7fefbbbbf8042dfa446b2f
SHA512

557b82e357748e98ef7a18f7032d04cd0bc6666973d8d10af85247e889bebd4a1161ebfb1ca2ca2650ec8b4e4d38aa4ea09b48f7b31ad76c723f71cb7f81059e
SSDEEP

192:2zNiPKu4dEM4JEqPF/Eke3gr2Ir5Ano/hwj3IeXBdeLrdTYZrj1J4Ig:TICmqPF/Eke3fIr5Ano/hi3IuBALrdTZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.99af8e1571edc79df78adcc61f2ece2a_JC.exe

Files

NEAS.99af8e1571edc79df78adcc61f2ece2a_JC.exe
.exe windows:4 windows x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE