NEAS[.]00cea7ec7d6fa63df094ff9435c01f00_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00cea7ec7d6fa63df094ff9435c01f00_JC.exe
Size

50KB
MD5

00cea7ec7d6fa63df094ff9435c01f00
SHA1

66b6e4b70e8a4a43c3b8c45ceb218f45d7a275b1
SHA256

0546570b8c42044a16e2d6c88aea267fd57d3984280291bd3be2e3057f6d6684
SHA512

45c85cfa7acc447d8a1ba6d1256a891a0f425df6c05d59823a2c15ea7c0a2ae778a2a34ae91efaa85de41b6d40ebb76c4528b5f409f12649667cf6d28e773bfd
SSDEEP

768:V1QM9CFilbA7Oc5fpVZRYMMDHjvEX2nT+ipe8tDWU/LR2NBZpmjEJ+lV:xWi5AzfXYMMHY2nT+ipeYv2ND4xV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00cea7ec7d6fa63df094ff9435c01f00_JC.exe

Files

NEAS.00cea7ec7d6fa63df094ff9435c01f00_JC.exe
.exe windows:4 windows x86

40656839aca8d3facdb9758e3cd30bda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetFileAttributesW
GetModuleFileNameW
Module32First
CreateToolhelp32Snapshot
CloseHandle
WaitForDebugEvent
ContinueDebugEvent
CreateProcessA
GetCommandLineA
GetStartupInfoA
OutputDebugStringA
SizeofResource
LoadResource
FindResourceA
ExitProcess

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ