NEAS[.]d39ce8e3b85bb7d3dd177a51a6a9e070_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d39ce8e3b85bb7d3dd177a51a6a9e070_JC.exe
Size

66KB
MD5

d39ce8e3b85bb7d3dd177a51a6a9e070
SHA1

8a7987c959bbddf8d3b4749e68852b0e651951ca
SHA256

343e22f55b59de5040a9d4f57ddbc5dcd94fc4e534181dffd4b789c647d84b0d
SHA512

7e15092f098cb9868a5ddce48e3beab356b9a6ab9a4123e1d9bc7eca1c16b93dffc541a302c59789f2868c058d4d8b6aa0ca81318018e79c7b82ec7c2fea0139
SSDEEP

1536:Ekn3IsMk0jx2NzlssIvk3yDZMj3nha1VsRAlNxp8:As1/3IZMj3SWWN8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d39ce8e3b85bb7d3dd177a51a6a9e070_JC.exe

Files

NEAS.d39ce8e3b85bb7d3dd177a51a6a9e070_JC.exe
.exe windows:4 windows x86

0a53774ed016bb4a8742b9f33cad08b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoExEx
IsValidLocale
MoveFileWithProgressW
Heap32Next
SetDefaultCommConfigW
SetConsoleKeyShortcuts
CheckElevation
lstrcpyW
GetMailslotInfo
BaseIsDosApplication
FindFirstStreamW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE