NEAS[.]6fa25149fd804f9b776dd0da2e62ba26_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6fa25149fd804f9b776dd0da2e62ba26_JC.exe
Size

4KB
MD5

6fa25149fd804f9b776dd0da2e62ba26
SHA1

0732d5776ef2d1497ff23c0eada2af552ac4db6a
SHA256

90933bdabaa86d8098a3d63787faeeb52414385b0f696362f110afdf2758e52f
SHA512

5aadd15efc891b07516291911a9e02026ddfa7b4dad840ccc21f17f12019f8e1eecf055e13ddd281227865be1a1a9dde43b764de5b5f07bc95c8256f4f920d59
SSDEEP

48:SMTikRd5AtMznXiVtEMmx/hJNSwXIj2UxJ0AzyOC0XsN1vb9FpF0:Ykf5rnXomxT1VdAzTCdpzq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6fa25149fd804f9b776dd0da2e62ba26_JC.exe

Files

NEAS.6fa25149fd804f9b776dd0da2e62ba26_JC.exe
.exe windows:4 windows x86

9cd577778e77019eb652a485e4b58162

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA
StrStrIA
PathRemoveExtensionA
PathAddExtensionA
SHGetValueA

kernel32

CreateMutexA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpyA
GetLastError
lstrcmpiA
lstrlenA
GetModuleFileNameA
DeleteFileA
CloseHandle
CreateProcessA

msvcrt

fputs
_snprintf
fopen
memset
fclose
__CxxFrameHandler

Sections

.rdata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE