NEAS[.]cca38ce3e3d09d482f7f6caf6e7122b0_JC[.]exe | Triage

Sharing

General

Target

NEAS.cca38ce3e3d09d482f7f6caf6e7122b0_JC.exe
Size

77KB
MD5

cca38ce3e3d09d482f7f6caf6e7122b0
SHA1

208fa215c4f37dd7bf913fca699ad5a5ae15d335
SHA256

25b7e7dcbd67d9a56a33aab09d5f47c171e8f22ba8e82b70adbad0f20e937d90
SHA512

232db6d35e761de84289d13317f710ad4ea61722d27cb244c13af6ea0b0eb887518c72478f3509c26258484166a6aa34939df7da35ad1017b0e1703f438a5530
SSDEEP

1536:lwiAKeaXK6sRezSt9FOsnx2Uu1RyuEh4QoXg7gDD9uCB6R:lwiAKeaXSezpWu1RyJoXaYnIR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cca38ce3e3d09d482f7f6caf6e7122b0_JC.exe

Files

NEAS.cca38ce3e3d09d482f7f6caf6e7122b0_JC.exe
.exe windows:4 windows x86

cad34151d9588ae924ef14e2a3620233

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleFileNameA
GetStartupInfoA

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA

msvcrt

_splitpath
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE