NEAS[.]ccb85aeb8340c2708a03797f962cd4a6_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ccb85aeb8340c2708a03797f962cd4a6_JC.exe
Size

318KB
MD5

ccb85aeb8340c2708a03797f962cd4a6
SHA1

4a95e93f9b3818497a629f0d0ec649b08cae5b9c
SHA256

26f0913ce7a4b10f4c9efa26da0686a885761dd45b8a1041f23d4d5d39a5ade4
SHA512

cac4574af1a7bf5ce89b9542568e3dcc285905259b555612067bad016b49660790d9b449186e1fe7753a8a18bcc1e30b3787126f7cef912aecbff7b76b363d52
SSDEEP

6144:PU0USPuHKKAsgBZg178Z+Snk6Fpwlw8RmuZSz8VdPbMK95BL7jGjFUHpJ+MBb:2SPXSzJSk6FpwlzmupVdjx5B/mFYJ+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ccb85aeb8340c2708a03797f962cd4a6_JC.exe

Files

NEAS.ccb85aeb8340c2708a03797f962cd4a6_JC.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 310KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE