NEAS[.]9b8a53016aa305d636e5d22c0c330751_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9b8a53016aa305d636e5d22c0c330751_JC.exe
Size

58KB
MD5

9b8a53016aa305d636e5d22c0c330751
SHA1

53ffaf7aaa249c116c2160156b1b1a737eef6d6d
SHA256

31934d57798da3f1a870a23ffaf0e137fc2b795b715722107aa0486f0a155f8e
SHA512

1c9d470a484059f3d9bd145641bc091a6af0ef5f1f7cd72a38baf7791e6247ae6333af924d0b0c6fa512140eb093e4f35956830d1214388c4515f6d9b93dc274
SSDEEP

1536:CJ1OcBDIcFqi+sLCAl8T7Ur8/fkvNXxQ5ivb0Ho:GfBDIcFqi+b46Ur8f0NucvbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9b8a53016aa305d636e5d22c0c330751_JC.exe

Files

NEAS.9b8a53016aa305d636e5d22c0c330751_JC.exe
.exe windows:5 windows x86

c2e4e81134e988fc8d17f4c1fdb43347

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyA
RegQueryValueExA
RegCloseKey

kernel32

CloseHandle
CreateFileA
ExitProcess
GetTempPathA
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ