NEAS[.]9afd6390b48cc7e42b0575bf25f41a10_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9afd6390b48cc7e42b0575bf25f41a10_JC.exe
Size

313KB
MD5

9afd6390b48cc7e42b0575bf25f41a10
SHA1

b15075136f3eac8ba34efdda71f02814604a2614
SHA256

d7bf3029771ab89d0d7cb6b5554c6e3224537709146301b8cd2b3f5fde710035
SHA512

48f617c0983c373f7945698198ecf7da64b23d95e3017ad9da924ef6fefce8b6922681eb11f20828234f532236e1d614e0eeca9cc9c7805a57ac981e465f7063
SSDEEP

6144:fygm0vBfFMupXyMqMnJV1XrNkrIxKMGY7JS1d42Wo9DcdK:KgXvBfGaXyM/F2r6KWSd42Wc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9afd6390b48cc7e42b0575bf25f41a10_JC.exe

Files

NEAS.9afd6390b48cc7e42b0575bf25f41a10_JC.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 307KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE