NEAS[.]1cc334bb50516eb637590594407905a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1cc334bb50516eb637590594407905a0_JC.exe
Size

344KB
MD5

1cc334bb50516eb637590594407905a0
SHA1

064b83d9a27f607dbcdb41fdbb42b863522b5ba2
SHA256

9a01a29a384155e95581dfcce96e3d9b588fe63b461ab148619c76e4edc4ea93
SHA512

7c1d13d8a2f033f489bd76f8e38021405d6153ac03e75632b3c1aecb6499b505be0d0a80421a0f5f3b55a8a23edd23a320304c65631cd61fc8ae041d32827206
SSDEEP

6144:SaVKyyzwbnUkoiqwcAR92o29tZTEr6UTdO5CksxCDy9pPbzBHU2ytluI:g7yUTihRQhE9ONs46pP3BHUbtL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1cc334bb50516eb637590594407905a0_JC.exe

Files

NEAS.1cc334bb50516eb637590594407905a0_JC.exe
.exe windows:5 windows x86

04436556038016bdc579850c86f036aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersInfo

Sections

YHGSDW
Size: - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YHGSDW
Size: 340KB - Virtual size: 344KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE