NEAS[.]7a92a9eeee889ec65b7f4c55b7f66250_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7a92a9eeee889ec65b7f4c55b7f66250_JC.exe
Size

329KB
MD5

7a92a9eeee889ec65b7f4c55b7f66250
SHA1

510423408cfed17b7aae984d90afe3244b96a305
SHA256

c67723d84d38e2ec1afb3ba1d6d5aac240332506340fb3c2cfcefeea32ef6616
SHA512

1cf3a6ff6c42061f75580428341fd2b6ffda37de291d6a088d6c78639470e830fa2229e912b238a9e5fe3f09651042a6efea0f88fd28229074fc4c29eeb7edee
SSDEEP

6144:Wbp4JXa3vgPHQvEhZmvCrycKgBtyhXn/R3fo8CX/J0:2p4ivgPH5fmvgMX/JAi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7a92a9eeee889ec65b7f4c55b7f66250_JC.exe

Files

NEAS.7a92a9eeee889ec65b7f4c55b7f66250_JC.exe
.exe windows:5 windows x86

aac73941c87ad61412ca8ad4d2283df3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DestroyMenu

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: 296KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE