NEAS[.]012d8babb6486d8fc2c380df408ceb60_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.012d8babb6486d8fc2c380df408ceb60_JC.exe
Size

180KB
MD5

012d8babb6486d8fc2c380df408ceb60
SHA1

95ebf7cef21a39579ee922d0473263b947ed6a4d
SHA256

306f352b94bc1056b298e63fc51bd4f901d621237f965e37d957ec8f6978491e
SHA512

75258baa37571ae7e04a48df1797716ab9d98259a51227e036fddb92ae7e32ae7433ef35fba2300f9217ec02ca0e43d6a1738076960df2cb0351266ba46ae60a
SSDEEP

3072:C8E854B6QHLyF0CBWP/pkArrN75VrCVrp9sWfQm76uWlXBXdHGSdsKGZsH35Ur/s:e6BNMHCExgrpIlXBNHGJZc+r/PfE1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.012d8babb6486d8fc2c380df408ceb60_JC.exe

Files

NEAS.012d8babb6486d8fc2c380df408ceb60_JC.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 68KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE