NEAS[.]850fdb91b1fd31c6706e5d9e7f9ff1a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.850fdb91b1fd31c6706e5d9e7f9ff1a0_JC.exe
Size

5KB
MD5

850fdb91b1fd31c6706e5d9e7f9ff1a0
SHA1

a57dbd4d3f8465f94e147e5561ec2fdcb1a71e8f
SHA256

eeec0a92a86c3cd99930fac4f53e8b6ea590d363f0e37137867c7cf5b67a0ed3
SHA512

095eef2ce38105dc45f841d2e5811b527fe40a7c126b5904e447227fc62f3760ffa91a6b3807d6347b083b97ff056f7eddd4984273a6a17b7d79b24ece479477
SSDEEP

96:Zr4VbESMnPWEpJzH1nKyG464Z1D4toikC3G9xXCpk:F4VbbMn3jVnK/475HL7kk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.850fdb91b1fd31c6706e5d9e7f9ff1a0_JC.exe

Files

NEAS.850fdb91b1fd31c6706e5d9e7f9ff1a0_JC.exe
.exe windows:4 windows x86

18c3cd01b0b0d75bdb8ffaa773f7aba9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetProcAddress
GetModuleFileNameW
GetTempPathW
GetVersionExW
LoadLibraryA
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

user32

wsprintfW

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ