NEAS[.]0e3b972df7e1c44b771b113b17118810_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0e3b972df7e1c44b771b113b17118810_JC.exe
Size

66KB
MD5

0e3b972df7e1c44b771b113b17118810
SHA1

38d7eb69213e8f2e88371a2bbd12f5ef81b8aace
SHA256

420e9062cda8107850896f498c07186d4bfad34ade19f3d09a1b11b24bbf077c
SHA512

43c2671f46fbf5815cc2f8ad7a75ccb04d7034c1e720e6db65fd7a4abc15e1b0f75e66adf7e1d12d0df6a74624a45a65672b5b8771ad6a98a53a81dfc3af4900
SSDEEP

1536:RriZvNjbTyDZnM1+UsHtqnjzNkNsFelultFefFdh58u9fHHd:Rri9VSEYHINkNsFD32V5PV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0e3b972df7e1c44b771b113b17118810_JC.exe

Files

NEAS.0e3b972df7e1c44b771b113b17118810_JC.exe
.exe windows:4 windows x86

8023bbbe0371e50635961cac681c5e04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SortCloseHandle
EnumSystemFirmwareTables
DebugActiveProcess
FileTimeToLocalFileTime
IsDBCSLeadByteEx
WriteConsoleInputVDMA
WriteFileEx
GetFullPathNameW
RegisterBadMemoryNotification
SetErrorMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE