NEAS[.]5f33d725ea950660d55bfd4740b75214_JC[.]exe | Triage

Sharing

General

Target

NEAS.5f33d725ea950660d55bfd4740b75214_JC.exe
Size

59KB
MD5

5f33d725ea950660d55bfd4740b75214
SHA1

da9a7e126ed10f317008e11af5b4ab129259cc0d
SHA256

fa7f8e7efc07e52b69ee14962c1fdb6b9af59621e65159b74c7e0a6e6da0e2c5
SHA512

54ae1a1f8d6cf85c5e41eb689a8a9e92c2632589f4ed1e2239f6831ff9d50781865ed76c74e28f063d5bca99695e98161dd11fcb43ce41d2ed9d13f267e05d4c
SSDEEP

1536:0icppOI2z/gAl8X7qqZBvVnDdbtceuT4KBI:0ic+XzoWad5N44T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5f33d725ea950660d55bfd4740b75214_JC.exe

Files

NEAS.5f33d725ea950660d55bfd4740b75214_JC.exe
.exe windows:5 windows x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

GSUDUHUW
Size: - Virtual size: 148KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GSUDUHUW
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE