NEAS[.]06a19dbedfeaf1ca6e63bccf0ee524a0_JC[.]exe | Triage

Sharing

General

Target

NEAS.06a19dbedfeaf1ca6e63bccf0ee524a0_JC.exe
Size

59KB
MD5

06a19dbedfeaf1ca6e63bccf0ee524a0
SHA1

28f921a24ee402fce72f1ed95f20d53f98853c5c
SHA256

1250ab101448f88875c0e0430afe54631aa09cc4d690395584ed04b97fbc8815
SHA512

d32a17974f3156ccb60d68362151f168b2e978d5b06387ebe7e84c4f35f61d875fdec32fddfb81c836df94c3cd832f13db719965524b3cd7e8af44f94b3ef2d9
SSDEEP

1536:p3Yj48OOOouxdDcSO1njuYpKIDfDCr7QnJ6G:poj4KWdI/1njucKIbyM0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.06a19dbedfeaf1ca6e63bccf0ee524a0_JC.exe

Files

NEAS.06a19dbedfeaf1ca6e63bccf0ee524a0_JC.exe
.exe windows:4 windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hwupiaz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE