NEAS[.]0c4aac93fc40d2c2a9612dcc33f1a650_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c4aac93fc40d2c2a9612dcc33f1a650_JC.exe
Size

2.1MB
MD5

0c4aac93fc40d2c2a9612dcc33f1a650
SHA1

feab16f79cfb1e6954e01339a81fcfbf102480dc
SHA256

1d33d1caf395a58b4f27abdb8d4751cdf5180ea15eb953d30de161f20def3c7c
SHA512

7713459ad5075b212115210e2bf6509daca2871b4e71d5aa8205eb36820c0a852799aeb37e2b566f4144741e0c520eddf750f9feec0d514f7248bf58fca8d95e
SSDEEP

24576:ymyUSYvQu/3IJgjF4feRCWmszl8J8/9sLm8Protuf9TbDLWuTvVt6eC:ympYJKF42RCyiJ8eLItuVTLJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c4aac93fc40d2c2a9612dcc33f1a650_JC.exe

Files

NEAS.0c4aac93fc40d2c2a9612dcc33f1a650_JC.exe
.exe windows:4 windows x86

cfe7467cba4c3b5b2644969fba08075d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualAlloc

user32

GetShellWindow

Sections

.text
Size: 716KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE