NEAS[.]4bf047464d6106ac90eae31a8fbc1770_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4bf047464d6106ac90eae31a8fbc1770_JC.exe
Size

291KB
MD5

4bf047464d6106ac90eae31a8fbc1770
SHA1

63e2d1a9deeb91dc5ae493d2aa8463c7fb30c24c
SHA256

33490eb9b12b5709601c61a538c7a492bbc139d9a2b23bf3470a60ea19bc423e
SHA512

0659db4845c1b5fd555bf8520958eaf6002eb92fa155cc41aa34960380b66c7d132f91e5be9ad5ba316b99067a3ab19815328fa9c2790ecf1267b7ad28730e1d
SSDEEP

6144:zCKw0+tZvozAx9/dpwwyQHhjqZDq8NjPCjEGpAJiJ/L4IO:2JH0Ze8NzIWez4IO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4bf047464d6106ac90eae31a8fbc1770_JC.exe

Files

NEAS.4bf047464d6106ac90eae31a8fbc1770_JC.exe
.exe windows:5 windows x86

0f8f365fd263ee2eb3ef080790a84df4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

WSAStartup

iphlpapi

GetAdaptersInfo

Sections

KOHGGFTR
Size: - Virtual size: 400KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

KOHGGFTR
Size: 288KB - Virtual size: 292KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE