NEAS[.]cdad4a70d90346c70523610a3db297a0_JC[.]exe | Triage

Sharing

General

Target

NEAS.cdad4a70d90346c70523610a3db297a0_JC.exe
Size

316KB
MD5

cdad4a70d90346c70523610a3db297a0
SHA1

06729eb4243287de1a89bfd90f98a8b7763bb0f6
SHA256

5ac577ed956a2a3ea27c95fc47d23d888362625edac57f1a248767147c2d271b
SHA512

97eca432fcd3bba0cd6ce6eced3ac63a1d7aff899af9c748667cce41747ba8958574cd1c4425e7fc0574892b210beee15c1f37a5e7746a63633e33b779e2ffbf
SSDEEP

6144:TOAztL6W+JJMPkZ5tJb52Wd83erDPKmjxTz7HbYcPCVYhg+KX:TOMFwMPkDH/QiPLxvzblu2FKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cdad4a70d90346c70523610a3db297a0_JC.exe

Files

NEAS.cdad4a70d90346c70523610a3db297a0_JC.exe
.exe windows:5 windows x86

f11f6549e50349d6f9e15c2e49acd8e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

htonl

iphlpapi

GetAdaptersInfo

Sections

OIYTGFRT
Size: - Virtual size: 384KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OIYTGFRT
Size: 301KB - Virtual size: 304KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE