NEAS[.]11a5471dc183405df02521aee83d9560_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.11a5471dc183405df02521aee83d9560_JC.exe
Size

702KB
MD5

11a5471dc183405df02521aee83d9560
SHA1

23526142fafadba54b8ee283a1b9ae0d5e1b7f41
SHA256

c282c000a513443e78a6eea856a92773c53db0df652dea8a908db6a3f0d512d9
SHA512

76fe13f66c122b864919b5143ef9947fe8712a9a13f3034bef765c9c6f82fa3528d1d36da6a97f33ded393f478e25bb809230e020a9cd44c07df64f712d0c6dc
SSDEEP

12288:L9Z6ROl3DBRWUFhuhZRd56kYWxyivADGN0y4hJIZYhxheWZYRtQqpk:LX6RETBRWeEhbcsyMAD+g/UWu7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.11a5471dc183405df02521aee83d9560_JC.exe

Files

NEAS.11a5471dc183405df02521aee83d9560_JC.exe
.exe windows:4 windows x86

f0bed16a4ff13602210c72eef213283d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetEntriesInAccessListW

user32

GetClipboardSequenceNumber
GetListBoxInfo
GetInputState
GetFocus

Sections

.text
Size: 693KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE