NEAS[.]73c28d1bfa6ccb0572a18b7cf9849800_JC[.]exe | Triage

Sharing

General

Target

NEAS.73c28d1bfa6ccb0572a18b7cf9849800_JC.exe
Size

52KB
MD5

73c28d1bfa6ccb0572a18b7cf9849800
SHA1

ed2e95bacd511791729b55c52a8ba7bff4e82203
SHA256

901f3661287d02fe0b34a145ef70a34552c3fe7373ece96bdc37dcfbfa774bc5
SHA512

68d537aed41d6189dbc1c2cb9ecd2ebe52eb1cc6867a88f72f8beddf9552d3cae2915bb2332fc53a73fdaa86f5285800649cb7c7a4918409f60cacbb2ac38f9d
SSDEEP

768:1xLmJPaEfXSp5Ny8DUul5NiK+0NNKACeqGyOXT/7symOAfDnLPzX7/7Ev+hqZegD:1ogjvo00xWi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.73c28d1bfa6ccb0572a18b7cf9849800_JC.exe

Files

NEAS.73c28d1bfa6ccb0572a18b7cf9849800_JC.exe
.dll regsvr32 windows:6 windows x64

a1579b61157440d5fa2d6241db9323a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GetComputerNameExW
lstrcatW
SwitchToThread
Sleep
CreateThread
ExitProcess
HeapAlloc
GetLastError

user32

wsprintfW

advapi32

GetUserNameW
LookupAccountNameW

ole32

CoInitializeEx
CoCreateInstance

Exports

Exports

?Dllmain@@YAXPEAUHWND__@@PEAUHINSTANCE__@@PEADH@Z
DllRegisterServer
DllUnregisterServer
EntryFunct

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

bss
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 612B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 480B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ