NEAS[.]NEAS585aee5ce020d9a786e0f6d73e11efd7exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.NEAS585aee5ce020d9a786e0f6d73e11efd7exe_JC.exe
Size

316KB
MD5

585aee5ce020d9a786e0f6d73e11efd7
SHA1

bf120d1910b37dcc7ad450500e7a60dc16b92ff7
SHA256

e3f338db3e462cb0381b3efefac393e5a4f8fb296b09952e9a6d9d867e285272
SHA512

4dc2e44045896a89491c1d2752d32fac624e5d04ece2c6a51ce9aa2dd938988514ebe293eecab9770ffbf607e1927b6c8f0b4ec5762bc6992d0abe6a074f8b70
SSDEEP

6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4ORk:BVAWNDTJHq9DIMTW8c1Rk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEAS585aee5ce020d9a786e0f6d73e11efd7exe_JC.exe

Files

NEAS.NEAS585aee5ce020d9a786e0f6d73e11efd7exe_JC.exe
.exe windows:5 windows x86

3b3ca5844bdb8b6b333c1e673e18f1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

IOKGDTTY
Size: - Virtual size: 488KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IOKGDTTY
Size: 309KB - Virtual size: 312KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE