NEAS[.]070c5111d60450a0f5233865a14500b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.070c5111d60450a0f5233865a14500b0_JC.exe
Size

66KB
MD5

070c5111d60450a0f5233865a14500b0
SHA1

6f4ff0a8993ede280607693e2e8caf925010c144
SHA256

75974faba03aff86d94d1ce57eb43531112540689b9a49cdf7690f77a648f2fd
SHA512

a8c60f0725cec55e2e0dfe5b6c271480869407daf84599752de4a11db4d378dc0eb0af54ec9274d82e5e014fc0d5f38e99a5ca1cb9a61f708930a4624bd76df2
SSDEEP

1536:kvC3md9CWmWtzfxW81NDlVPfyCA33/fXzdwKvFIUKoY5Y1MQz:kq3OZmQgI1lVPf03XXzdwKdInZ5Z0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.070c5111d60450a0f5233865a14500b0_JC.exe

Files

NEAS.070c5111d60450a0f5233865a14500b0_JC.exe
.exe windows:4 windows x86

cf0f028d4e404e9dcd0714d9eb0e0197

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerExW
CommConfigDialogA
VirtualUnlock
CtrlRoutine
QueryDepthSList
LZInit
AttachConsole
AddLocalAlternateComputerNameA
GetPrivateProfileStringA
WerRegisterFileWorker
SetThreadInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE