NEAS[.]6e9fc36d9cba91da9bd3bb7eed6fa2a0_JC[.]exe

General

Target

NEAS.6e9fc36d9cba91da9bd3bb7eed6fa2a0_JC.exe
Size

64KB
MD5

6e9fc36d9cba91da9bd3bb7eed6fa2a0
SHA1

9fc651f8c3e32ab8a476bbe0b5b55279e3f39507
SHA256

7b046b320636212746cbac7489174da9f7137a8f758ec74d3d2b49a1d49dd01b
SHA512

465f5217db613e27e774e42acf1603cf745ea64ee1fbc2102974baffdf698c44ccec653b1f81803cc69ed1b930dcfa9ba1840a3ad6a8c045bcdd4fee2ee8b60e
SSDEEP

768:/P78m0peYMRkF03U39XZaB+j8Y+EQGPL4vzZq2o9W7GsxBbPr:X4m08aaENkB+j8Y+XGCq2iW7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6e9fc36d9cba91da9bd3bb7eed6fa2a0_JC.exe

Files

NEAS.6e9fc36d9cba91da9bd3bb7eed6fa2a0_JC.exe
.exe windows:4 windows x86

1ebeceef69939e7408f19e5deaa5fdb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
lstrlenA

user32

LoadIconA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

mfc42

ord924
ord1575
ord561
ord815
ord800
ord2818
ord860
ord537
ord1146
ord1168

msvcrt

_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
_mbsrchr
__CxxFrameHandler
_snprintf

msvcp60

??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�[�ˣu
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ebeceef69939e7408f19e5deaa5fdb8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

mfc42

msvcrt

msvcp60

Sections

.text Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 468B

.rsrc Size: 28KB - Virtual size: 25KB

�[�ˣu Size: 20KB - Virtual size: 20KB

.text
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 468B

.rsrc
Size: 28KB - Virtual size: 25KB

�[�ˣu
Size: 20KB - Virtual size: 20KB