NEAS[.]bbaf8a7746640dff5b64b5f92c93c440_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bbaf8a7746640dff5b64b5f92c93c440_JC.exe
Size

34KB
MD5

bbaf8a7746640dff5b64b5f92c93c440
SHA1

814c53e58828dd1eb6c909c63d4123f7b9cbcfee
SHA256

6b26faed6ed36720650c9dfb04b7cbb6f05fc35447cdf9d14060237a0f1c2e1f
SHA512

be6ce5ab0a86b576cde2e767b2c188a042061e46c89af5809a4bf2c6b64b59e6cef2b183b06c8d7244773e1bcc987d9062729b6996c796470593523fcc7eb3e7
SSDEEP

768:0MaC/DIBhfcuLgE1O2C5pn8YiXMt/skFztsScKiJoA:0M5acu3G5pn8Yi8t/s2CbhSA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bbaf8a7746640dff5b64b5f92c93c440_JC.exe

Files

NEAS.bbaf8a7746640dff5b64b5f92c93c440_JC.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE