NEAS[.]a510f019e45d87a1d36422737fc40f00_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a510f019e45d87a1d36422737fc40f00_JC.exe
Size

182KB
MD5

a510f019e45d87a1d36422737fc40f00
SHA1

b1b512e461903c84fe676b6ef635fb0e8292e33c
SHA256

ee493fc6b04f8714b01f0097678b352ddb97d36dfa1d807ad4972c7f1ef91c0e
SHA512

e0a86277ead15aa32372bf9754240dcbaa7f2d4f334d061037a6675a92bb61b4f41c22d10df517b68be9b5d8d9e64aca03c209f6694f7b4b2eb2aacb8f70d2e7
SSDEEP

3072:xTsDjlJ20yYqsJG2S+Ox6a8sTcN7ANAN2BAt6BiPkXmb29fL5UGiZWLKYvQd2gX:xADjllyYqs42SAAcNNYA1qmbQfLmWxgX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a510f019e45d87a1d36422737fc40f00_JC.exe

Files

NEAS.a510f019e45d87a1d36422737fc40f00_JC.exe
.exe windows:1 windows x86

dd943f2bcea3642dcab4b8939268716a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
GetModuleHandleW
lstrcpyW
lstrcmpW
lstrcatW
CloseHandle
WriteFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
GetCommandLineW
lstrlenW
CreateFileW
LoadLibraryW

crtdll

__GetMainArgs
exit
raise
signal

ole32

ReleaseStgMedium

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

LoadStringW
SendMessageW
wsprintfW
MessageBoxW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ