NEAS[.]1a045096142eb50b0248e73c513b71fe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1a045096142eb50b0248e73c513b71fe_JC.exe
Size

304KB
MD5

1a045096142eb50b0248e73c513b71fe
SHA1

c09b575d562101cdd583821c52f295a88b996236
SHA256

d3a69111fdc84aed2bb00717146c7c716835e876392a36a1d87f1e1649da8afd
SHA512

ced63c2d38723832d88de83415ab15ac5bbfd5e4023d8919d4c4cb279644d9d9bf2cde31725d63a4f1221ea2c7f34a1e2864e945ef5c33fce430e78114d0ae82
SSDEEP

6144:KyQ9/6EvqGwTV2qZcDJphestvyiucHU2fth8ZQtNope1E:pQ9HS94q6Dom/7HUqtCZKXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1a045096142eb50b0248e73c513b71fe_JC.exe

Files

NEAS.1a045096142eb50b0248e73c513b71fe_JC.exe
.exe windows:5 windows x86

d013360fb950ce3e873279a3120f8ba6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

PostQuitMessage

advapi32

RegOpenKeyExW

shell32

ShellExecuteW

ws2_32

WSAGetLastError

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 78KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 222KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE