NEAS[.]ad45c64627e2fb7cbc85727ac3ccd160_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ad45c64627e2fb7cbc85727ac3ccd160_JC.exe
Size

30KB
MD5

ad45c64627e2fb7cbc85727ac3ccd160
SHA1

a545ae56826d302efe4c11e2d621af71b54ca53f
SHA256

ab6bec6e2ecc4144948a9d229056e6c9ec5d9eb9660a8308717bf38af501401b
SHA512

a9964f644ddf7a7014f459a3c5fd4882d7f044d171bd2430789ac6c1b683c33e5e851df5d4ae4d2ed718ee2038d4aa60bcd10457a4d98eddb7d95b8e323ef4d1
SSDEEP

384:Ef290bD+3u6QzxmrXDOQEy68qgfOVVNWI4Rm5oe+E6pMX8A:629U+3uZzArXDOQ/XqgfEN5Gi+E6dA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ad45c64627e2fb7cbc85727ac3ccd160_JC.exe

Files

NEAS.ad45c64627e2fb7cbc85727ac3ccd160_JC.exe
.exe windows:4 windows x86

25314f3b8ae6ed44df4cd13c04366f69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oobjlib

UpdateOracleMap
GetListOfDefinedDevices
RegenerateSymbolicLinks

msvcrt

__getmainargs
_initterm
_onexit
__dllonexit
fclose
fprintf
printf
fopen
exit
_exit
_XcptFilter
__p___initenv
__p__fmode
_strnicmp
__setusermatherr
_adjust_fdiv
__p__commode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE