NEAS[.]a257ddcc6a94187695569458484b05c0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a257ddcc6a94187695569458484b05c0_JC.exe
Size

144KB
MD5

a257ddcc6a94187695569458484b05c0
SHA1

30e5820244ca3ac4bdb325e2ba2d2ff3d3d1ba40
SHA256

79a89cca9e002bca3e443a17ca215e4ba97984ad8a303441db4c43a65dd43a83
SHA512

7923ccc1e8c937061c9b8e24f7c27b83f0d18b09f4c8a43cbe890267733e64ac68dc4bfec22740faf14349e41f181f9df13ba0ebbc3d9dc362b2f30acf629501
SSDEEP

3072:QYeHNpwUpKh0bLx0wP0ftHXBB8lOmQNLvEBme/uc2yPy/61s9jKUwP5sSv:det/vxKlHXkOmQNLvEBxmgqIsVKUwKSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a257ddcc6a94187695569458484b05c0_JC.exe

Files

NEAS.a257ddcc6a94187695569458484b05c0_JC.exe
.exe windows:1 windows x86

49d7ad15ecf8f564819a26815954d58d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetModuleHandleW
CreateFileW
WideCharToMultiByte
LoadLibraryW

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

advapi32

IsTextUnicode
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW

ulib

?Initialize@ARRAY@@QAEEKK@Z

ntdll

RtlFreeHeap

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 135B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE