NEAS[.]0c8053bedc524b676a2fe5978986cdf0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c8053bedc524b676a2fe5978986cdf0_JC.exe
Size

502KB
MD5

0c8053bedc524b676a2fe5978986cdf0
SHA1

571cfc90e8dc23ce51f51e1ad73b1396ac0968da
SHA256

140f309763659b36b53e859edb6a61db9aaabf3e4e12c1881a95866d926b3509
SHA512

dbc7c7522e7bcd31f47011ddeee3fdf31bbba89b3e4bddb9fb51ad92d179d28def636ae4e577d157b872e63cc53e8222fd86e6a956cfe8ba2722575a723547d7
SSDEEP

12288:V579O5Bbr9fT4WX0//kBLqI+8fIdTv5B6VWY1I:V55O3bpf8WEUB+ifuTvsI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c8053bedc524b676a2fe5978986cdf0_JC.exe

Files

NEAS.0c8053bedc524b676a2fe5978986cdf0_JC.exe
.exe windows:4 windows x86

f7d7aebc53da63d60a50b5993b57877a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

wsock32

send

Sections

.
Size: 28KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ