NEAS[.]addc7225c4e582e05ea6a9c15fea54a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.addc7225c4e582e05ea6a9c15fea54a0_JC.exe
Size

134KB
MD5

addc7225c4e582e05ea6a9c15fea54a0
SHA1

524a201196fefe21994ae5ac9f7dd5b1891191d9
SHA256

53087d27939977b73e89e8f24c04cbb44107151a13e81f421348b279c3f1163a
SHA512

0a25d8e68a7a3f16c867fc24478430454c28e241a65bc520fdfe62d64c9938755b630e4a7bb60e9c1236123df01b6414f9873cd50f09770fd70c59f74456d741
SSDEEP

1536:NH5wZhGZmhunyQfnh7/NmuHSu6xx/4xBgnQT1dZXDo9dNc/ymiS0TX5D5qB0FMXb:pQsrhhx9yuk/47ZzomBm5D5LMXqNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.addc7225c4e582e05ea6a9c15fea54a0_JC.exe

Files

NEAS.addc7225c4e582e05ea6a9c15fea54a0_JC.exe
.exe windows:1 windows x86

db821b8c11ac13e850ef2fafb2bd83bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetModuleHandleW

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

ulib

?Initialize@FSN_FILTER@@QAEEXZ
??0DSTRING@@QAE@XZ

ntdll

RtlFreeHeap
RtlAllocateHeap

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 856B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 341B - Virtual size: 341B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE