NEAS[.]07c7850a4a598c70c3826fde3132fa60_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.07c7850a4a598c70c3826fde3132fa60_JC.exe
Size

66KB
MD5

07c7850a4a598c70c3826fde3132fa60
SHA1

4eb9cc39aad37b926f41223308df9636b27183dd
SHA256

2ea3257401fe76dcd715f2352c61f0f110dc35249e7db860bbdca7c4ce05072b
SHA512

85334a4b9bcfbf8479fd2135383870b3f53be4066e62445b6048744025865e840b3b723816bab78d34071022f35c2ffd12c055e6aaaaad264a0de2997e4352a7
SSDEEP

1536:Y3yRb2+KpXtESrPr2tUHM+1HTa0ldBRut884K3/jX03bEyl:myU+4XtESrS+HM0T/ct8W3LE3b1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.07c7850a4a598c70c3826fde3132fa60_JC.exe

Files

NEAS.07c7850a4a598c70c3826fde3132fa60_JC.exe
.exe windows:4 windows x86

6be9b126c28cfe3732f6e4c3d97c5c53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PackageFamilyNameFromId
CreateFileMappingNumaW
SetThreadUILanguage
CreateWaitableTimerExW
K32GetModuleFileNameExW
GlobalCompact
AppPolicyGetShowDeveloperDiagnostic
AddAtomW
EnumerateLocalComputerNamesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE