NEAS[.]6fd4788f78d464f6a2dc5d1c020d4af0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6fd4788f78d464f6a2dc5d1c020d4af0_JC.exe
Size

7KB
MD5

6fd4788f78d464f6a2dc5d1c020d4af0
SHA1

c59aa4972e03afe44334554c787e18c7925980dc
SHA256

be1895be9105adaaf96d88cd9b8baff18dbd25baf85ff0589643cf134ab493d4
SHA512

c6326f380e7e88881debe972abdbb0506c23e7bfa20ff32ff73c9f36780a7c480ebb50c21e2e0e38924bf2d264204d5cc5ed138de4f534885676ab8344a79fad
SSDEEP

192:yrV9TC8O5j9kx508ygU+XAGQnWAuDAMk4rWMnW:yJ9drMJnWPAKrWMnW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6fd4788f78d464f6a2dc5d1c020d4af0_JC.exe

Files

NEAS.6fd4788f78d464f6a2dc5d1c020d4af0_JC.exe
.exe windows:5 windows x86

8c9f38d57f27645e274cbc37fa815ee0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_controlfp
_except_handler3
_cexit
_XcptFilter
_exit
__p__fmode
_c_exit

advapi32

NotifyBootConfigStatus

kernel32

GetLastError
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ