NEAS[.]049ef2571099559253e23d5d5ccfd100_JC[.]exe | Triage

Sharing

General

Target

NEAS.049ef2571099559253e23d5d5ccfd100_JC.exe
Size

24KB
MD5

049ef2571099559253e23d5d5ccfd100
SHA1

7ac3389abab0f8ae82ae246487eadc7b58453876
SHA256

0ec2b425c18d34d542f8d49f7bc5531c2b0851c69bddf84fe99337b5726a3c26
SHA512

6e5b1a8ec9b8542bd022f3411d348757fb1ed0d82186724d9a3f70e8c173ae681c4d76a48b4a3565b838cf16678f1ed789b36a856a64a028709bb0c4b3ec1caf
SSDEEP

768:mRt2D/tBJ7GwD194x+fvYVN3PYDmnrO+:/lRfAUQVN3bn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.049ef2571099559253e23d5d5ccfd100_JC.exe

Files

NEAS.049ef2571099559253e23d5d5ccfd100_JC.exe
.exe windows:5 windows x86

0493264954cd5100c5fa796a7d50d2fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_controlfp
_cexit
_adjust_fdiv
_except_handler3
_XcptFilter
_exit
_c_exit
__setusermatherr
_initterm
__getmainargs
__initenv
_write
strchr
puts
exit

kernel32

FormatMessageA
LocalFree
GetModuleHandleA
GetLastError

user32

CharToOemBuffA

ws2_32

gethostname
WSAStartup

mswsock

s_perror

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE