NEAS[.]5585ae2f0f511f3a3e597e31523f753c_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5585ae2f0f511f3a3e597e31523f753c_JC.exe
Size

61KB
MD5

5585ae2f0f511f3a3e597e31523f753c
SHA1

398158b0b914fae582867ca18a6a23f1c10eae8f
SHA256

aaba22a4744ae4bad0dd033267b3b401d9fbec15db1d7a37c24db8c16710e396
SHA512

4a41bc5b4fee102d5956ea437db4b0c66fd3b204252c3230b0f2cd1fdeb27c3e853a874de55ed66470062630f3e16e84ce1cfb66e4b5ef2834baab672d19c815
SSDEEP

1536:zxnhmuHsywOKwrDuLhAjU245kGk/RgDuqsFFyR:VA+lwf2JLusK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5585ae2f0f511f3a3e597e31523f753c_JC.exe

Files

NEAS.5585ae2f0f511f3a3e597e31523f753c_JC.exe
.exe windows:4 windows x86

f7d7aebc53da63d60a50b5993b57877a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

wsock32

send

Sections

.
Size: 28KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ