NEAS[.]3fe3ef247528409c2f7d4309ea5aba60_JC[.]exe | Triage

Sharing

General

Target

NEAS.3fe3ef247528409c2f7d4309ea5aba60_JC.exe
Size

28KB
MD5

3fe3ef247528409c2f7d4309ea5aba60
SHA1

b8ada1ef55bdcefc0ceefbc26b96781cc97c251f
SHA256

eb1336b4d38bc274b06b35cf9a60055e349c4a3172685251f4b55e6c2fe3a2cc
SHA512

6dd9d7aff1360f5283ed16fec67658124e33a6771c0505216b9b8e009b9286b5a048dc23d21bb02bca267bc858059f831f2a7b13b037134489d8d11f4f826c17
SSDEEP

384:MxGW85OqN0jmlfFjOm4lCtTyydPXggo9mp9Ol:MwRkeOBQy8v9o9mp9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3fe3ef247528409c2f7d4309ea5aba60_JC.exe

Files

NEAS.3fe3ef247528409c2f7d4309ea5aba60_JC.exe
.dll windows:4 windows x86

ec0f9f3513b2dc145232a117ad585fa6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Exports

Exports

GetWS_Traffic

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ