NEAS[.]e6db9bcaf30cd605a5d5f72ab0e7fad0_JC[.]exe | Triage

Sharing

General

Target

NEAS.e6db9bcaf30cd605a5d5f72ab0e7fad0_JC.exe
Size

244KB
MD5

e6db9bcaf30cd605a5d5f72ab0e7fad0
SHA1

6111c8b2acbca7288c97dc07749e60679732d974
SHA256

ec3d8db34b88702836d5a8d629f87f2ac561008606b6e993405016f603b327fb
SHA512

34c003d3295fc6f0cf5d9ea093aa082c9358dd95eb166ab619d069a4658969f6607aa7712345db0a77c58de8dea8411e9fe3be79d1fe9a2fe5a7b08c2e2dd6b4
SSDEEP

3072:RCh61TcjC9JY418Vhf2nUnKX5vf3Xurt7G0+e8ySjF+3rHq7UrMHizmrpDHM1Lo0:Rv1TcOdAwf3+5C6yE7Hqy6rM1LD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e6db9bcaf30cd605a5d5f72ab0e7fad0_JC.exe

Files

NEAS.e6db9bcaf30cd605a5d5f72ab0e7fad0_JC.exe
.exe windows:5 windows x86

18c89e2ec0a399c68eaedd6551ce71fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ