NEAS[.]31b47bc021826d8735e9c0e7ef726520_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.31b47bc021826d8735e9c0e7ef726520_JC.exe
Size

344KB
MD5

31b47bc021826d8735e9c0e7ef726520
SHA1

f55bcfa635d177c1f15cf054a964c0500f150048
SHA256

ae6b3433d9979c47c5161a0deb5e5c36fa80605a146de80297a8b59a0d28d900
SHA512

7e35271e354178eace683419e0c140b9f202f533d7a370c67da88aec5522fcaed7c5c42963f00357f8f583c3b810eaaca443d680366b9392d99322dc84b10cf5
SSDEEP

6144:SaVKyyzwbnUkoiqwcAR92o29tZTEr6UTdO5CksxCDy9pPbzBHU2ytlu5:g7yUTihRQhE9ONs46pP3BHUbtG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.31b47bc021826d8735e9c0e7ef726520_JC.exe

Files

NEAS.31b47bc021826d8735e9c0e7ef726520_JC.exe
.exe windows:5 windows x86

04436556038016bdc579850c86f036aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersInfo

Sections

YHGSDW
Size: - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YHGSDW
Size: 340KB - Virtual size: 344KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE