NEAS[.]36d42a4a74c6d1cc4671e18d7224ba80_JC[.]exe | Triage

Sharing

General

Target

NEAS.36d42a4a74c6d1cc4671e18d7224ba80_JC.exe
Size

7KB
MD5

36d42a4a74c6d1cc4671e18d7224ba80
SHA1

9d60ddc98406bc9f4cdb16bf76ffacc035ea0db1
SHA256

651638fc3491690f2b325198f2c5fddf498c456dd557091b307ee5fd56df48cd
SHA512

9300e014139f9567cde7e596baa2909b77b8438b0703e036f8724d0539e69c1bcc5956172d889633092de3a2f7b66a0001f0a7df47bc468376aa680fbe34689b
SSDEEP

192:SiPKu4dEM4EEqPF/EkeJeH+l+HxJU9kAh:RIC5qPF/EkeJeH+l2UOAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.36d42a4a74c6d1cc4671e18d7224ba80_JC.exe

Files

NEAS.36d42a4a74c6d1cc4671e18d7224ba80_JC.exe
.exe windows:4 windows x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE