NEAS[.]26dc33e9049ffc157be6f88084515780_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.26dc33e9049ffc157be6f88084515780_JC.exe
Size

66KB
MD5

26dc33e9049ffc157be6f88084515780
SHA1

e9a448c47c9b23916e708f26be6b4526d7d020ee
SHA256

decf955248e5c49321804136eba5cfeac26762fede365b4fa6051c5666c5a0f4
SHA512

c06f10529087949be88a276b28fe33085668968899ec1bc02a7a72b0ec816e7a5542c4dc1f6a8c806e89437f435b41b35d545f84ceb86911518555e4786dc02e
SSDEEP

1536:KJi2JxNbnXCV8VmoJ1cflLqqu3FhTLCL0Zp9+JiUdRRiw5uhXIwYbF:VmzVPJ1cIquzLZMiUfRv5uhXlYbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.26dc33e9049ffc157be6f88084515780_JC.exe

Files

NEAS.26dc33e9049ffc157be6f88084515780_JC.exe
.exe windows:4 windows x86

fceabeae15ef9a287c4f8752782e72fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AppPolicyGetMediaFoundationCodecLoading
SetConsoleCursorPosition
SetLastConsoleEventActive
GetConsoleAliasesW
FindStringOrdinal
RegGetKeySecurity
BasepMapModuleHandle
GetApplicationRestartSettings
OpenMutexA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE