NEAS[.]8bfc5e4f91ccddb8d5a4b3e2fe481800_JC[.]exe | Triage

Sharing

General

Target

NEAS.8bfc5e4f91ccddb8d5a4b3e2fe481800_JC.exe
Size

172KB
MD5

8bfc5e4f91ccddb8d5a4b3e2fe481800
SHA1

61da2da2cc91b8ddb7cc7519f97517796c9146a6
SHA256

1cedf518cea132d1a0c0c6ebee7eba0a613e74a37f4651a4b533448788a38603
SHA512

060bd0092a60945e976993210609c124b54cf7f8d91c61a2a14b293d2267eef825e5b91bde75e45139ce1524b516ea351499b4417f8a82887daaf0eb69395c0f
SSDEEP

3072:CQ6xHhPMlMpaJBN/tCyfrmCnAkeEDer8ysrs+MeffvE:CvjPUMpaJBdVfrm9hr+rsA3M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8bfc5e4f91ccddb8d5a4b3e2fe481800_JC.exe

Files

NEAS.8bfc5e4f91ccddb8d5a4b3e2fe481800_JC.exe
.dll windows:4 windows x86

32c3ea3a743d24bea618c4badea096f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
OpenIcon
CreatePopupMenu
IsCharLowerA
GetDesktopWindow
GetKeyboardLayoutNameA
KillTimer
GetWindow
LoadCursorA
GetKeyboardLayoutList
GetWindowDC
GetMenu

kernel32

VirtualAllocEx
lstrlenA
LoadLibraryA
GetOEMCP
VirtualFree
ExitProcess
VirtualAlloc

Exports

Exports

_pM6I2Dtg5Rjcgw@8
_31WeeuOB@8
4YHFDLjvcP
APJ1Ba8e61k

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ