NEAS[.]04f5aa2d9455a71626bc2db6be38ce50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.04f5aa2d9455a71626bc2db6be38ce50_JC.exe
Size

46KB
MD5

04f5aa2d9455a71626bc2db6be38ce50
SHA1

c40fab924a2af03661116a21c1e2e9c3c6d8feda
SHA256

1d6c32d117586f275086d8c99b786c0f300a20ade4a0b33fe98d0561d8d49ae7
SHA512

21fb3749f31f8624f10094459ace27d53a657181a90b4a617be9658411f61e3cf509b6f19566383d106ca6ddde79c4a1c4b2b5cce68943b2510380fbb51a3934
SSDEEP

768:1oFWhRC0dMItWrY4rMPLvhNAyRTkgOLxLXLNZbisGXnd8lqYW2yqXOlO:uASWIMThuyRTkgOV3N8sUeUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.04f5aa2d9455a71626bc2db6be38ce50_JC.exe

Files

NEAS.04f5aa2d9455a71626bc2db6be38ce50_JC.exe
.exe windows:4 windows x86

9534fcd0f693009c88102eb0630b67fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

CODE
Size: 17KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE