NEAS[.]13b68e6b29504c92d7f776ef325bf100_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.13b68e6b29504c92d7f776ef325bf100_JC.exe
Size

66KB
MD5

13b68e6b29504c92d7f776ef325bf100
SHA1

a92f444cef72d2442598f1292ab26fd05f8cd754
SHA256

21e6bf5b4e62d5152c794453b9a12e43c559bbee6bb66adc70e32bb38168e82b
SHA512

85468da4183b8cddbe305aa9fa08d2d811c99c57e8a6231607e6de7d19334aa02c64abf9436c6e0d733a331a5048d80f9084768559d8465c98cf86b6324ec5c5
SSDEEP

1536:igsYpRQ9ksgip0ppqZsSegRB6k+b8gjLlPh2qXtlwYLXQT2Tm:igVO1n/YfIgd4qXtKYLXj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.13b68e6b29504c92d7f776ef325bf100_JC.exe

Files

NEAS.13b68e6b29504c92d7f776ef325bf100_JC.exe
.exe windows:4 windows x86

52fc598fceedfc27a3c1f02bcef7500e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
GetXStateFeaturesMask
OpenEventW
CreateJobObjectA
CreateActCtxWWorker
SetSystemPowerState
DeleteSynchronizationBarrier
SetCurrentDirectoryW
ReadFileEx
CloseState
InitializeSListHead

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE