NEAS[.]2a18b4a6a2e7e28477ece10bf043df60_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2a18b4a6a2e7e28477ece10bf043df60_JC.exe
Size

316KB
MD5

2a18b4a6a2e7e28477ece10bf043df60
SHA1

e40e570bd094a34937ea23c12a1ba7cb793768d1
SHA256

8b8da3bc7611e0aff42746bacf1920b0eb099366c7532a718e83994aee8b5b56
SHA512

56c08ea3b4c6fb2a109370fe7650a67b0ce3f048955c5a355f51991a62980c832cbf9a3ebd6d332b21caf1600bf5c31066a2ff9692e029ded34236fa82bbc3b5
SSDEEP

6144:TOAztL6W+JJMPkZ5tJb52Wd83erDPKmjxTz7HbYcPCVYhg+KE:TOMFwMPkDH/QiPLxvzblu2FKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a18b4a6a2e7e28477ece10bf043df60_JC.exe

Files

NEAS.2a18b4a6a2e7e28477ece10bf043df60_JC.exe
.exe windows:5 windows x86

f11f6549e50349d6f9e15c2e49acd8e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

htonl

iphlpapi

GetAdaptersInfo

Sections

OIYTGFRT
Size: - Virtual size: 384KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OIYTGFRT
Size: 301KB - Virtual size: 304KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE