NEAS[.]8c6a4d29785e2f708d5aee48097d5f30_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8c6a4d29785e2f708d5aee48097d5f30_JC.exe
Size

144KB
MD5

8c6a4d29785e2f708d5aee48097d5f30
SHA1

ef66b1665d765420bb9a73422ef6bdf5680e470c
SHA256

c58df97a0ad5fc293cad421caf46d49bca969ca524bdc5ed72290818496a6590
SHA512

edd7bc3d35089affa4ef0021efd37708f2eb5f7acfeded1ba88ffcf2bca958fc8542dff2c1888595839336524f80cac24e98c207446831834c4dcf4c5d1637a1
SSDEEP

3072:MHuG6Xkuwh2ntk2LzSV0aKs+cEBbcJYixDbNSxYi4XIpXuoNB:MOGGS2ntkY1Ac4Dbf4pXuob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8c6a4d29785e2f708d5aee48097d5f30_JC.exe

Files

NEAS.8c6a4d29785e2f708d5aee48097d5f30_JC.exe
.exe windows:1 windows x86

3d289df6b9c7102d3e84d76e331f7894

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetStartupInfoA
lstrlenA
LoadLibraryA

crtdll

__GetMainArgs
exit
raise
signal

ntdll

NtWaitForSingleObject

wininet

InternetQueryOptionA

gdi32

SetPixel
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
GetDeviceCaps

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

LoadIconA
LoadStringA
SendMessageA
MessageBoxA
GetClientRect
InvalidateRect
EndPaint
BeginPaint
LoadCursorA
PostMessageA
DispatchMessageA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 338B - Virtual size: 338B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ