NEAS[.]062a7d8239842f3c29661d419e86dc50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.062a7d8239842f3c29661d419e86dc50_JC.exe
Size

187KB
MD5

062a7d8239842f3c29661d419e86dc50
SHA1

a99594423e7dff2017bcf1a346c316dd7d70c351
SHA256

e19da2959f3a38d4471cac62ef84fed39a8d6c841d8f40a2b1bdfa9415ad8c3f
SHA512

e1889a58a0febd364c43de7081caf7fbe30ffd50ff335dd6077bb8a80ed35b8e25bf97c5a16adf9b89e286f98e5714d756032cf7459ffdf4a5949d08e8352c14
SSDEEP

3072:WgeZMDY4gvpSV6qY3Ao+BHOf9w3xpsiwn/vSqg8kc/MwXQ:3PDavpzv+t3S/6qjkQMwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.062a7d8239842f3c29661d419e86dc50_JC.exe

Files

NEAS.062a7d8239842f3c29661d419e86dc50_JC.exe
.exe windows:5 windows x86

be26c2ed23f313e2ea4fab60aac77cef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
VkKeyScanW

kernel32

lstrlenW

Exports

Exports

InitStartData
?JobCorrect@@YG_JP6GHPB_WPAX@ZP6GPAX1_K@Z@Z

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0x763A
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0xD380
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0xED14
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ