NEAS[.]c6ed89054b02022ba5e9c874ac2e9734_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6ed89054b02022ba5e9c874ac2e9734_JC.exe
Size

427KB
MD5

c6ed89054b02022ba5e9c874ac2e9734
SHA1

7506c48f786ec1ad27ac97048e42f529e1f1e38c
SHA256

c562a700902c5a20ab360da55f39454046d5ecdb563ea8e0304b476cb7775ca2
SHA512

a2931fb30d3a6c04d38f568c7cb579c837410fe69de9bf4458aa623c19f3ad400674016995bed2856dcf8d3dc0d80d04006fc741c03e20df0637dd33440bda15
SSDEEP

12288:8s2UWXubsADihzEglClRV9+QAplNWOfolJa4:dSXHADihoTVHeNWxH5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6ed89054b02022ba5e9c874ac2e9734_JC.exe

Files

NEAS.c6ed89054b02022ba5e9c874ac2e9734_JC.exe
.exe windows:4 windows x86

f7d7aebc53da63d60a50b5993b57877a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

wsock32

send

Sections

.
Size: 28KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ