NEAS[.]30434a7d5921cc7712c5878c77a20900_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.30434a7d5921cc7712c5878c77a20900_JC.exe
Size

182KB
MD5

30434a7d5921cc7712c5878c77a20900
SHA1

9dd50e5928365b69bfd92449184df0b2b11ea3b5
SHA256

b24caeaef64bd09a105c08529db2cbd151a60d67512978c9210aa7f15725e77c
SHA512

5cc9b40eaf79d382dbbab8342b51ea935cfea74da357c5f9eba497964d2fe0923a69d1c420634c7f851abea36638299b191a9438544a8e7029ef44e3bf7e3adf
SSDEEP

3072:qRWwe7hsm34G00n5lsjYkhCYiRLF4oD2oVEef9FVOfQBJIXYoMy9ZyF:l3FzgjYksX24F3aSJIIoMy9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.30434a7d5921cc7712c5878c77a20900_JC.exe

Files

NEAS.30434a7d5921cc7712c5878c77a20900_JC.exe
.exe windows:4 windows x86

2362933e5ba416c44da7c8c43f89c299

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
GetVDMCurrentDirectories
EndUpdateResourceW
RegisterConsoleOS2
RegisterWaitForSingleObject
EnumSystemLocalesA
MoveFileWithProgressA
GetTimeZoneInformation
FreeEnvironmentStringsW
FindResourceExA
Process32NextW
LoadModule
WriteConsoleOutputAttribute
GetSystemDirectoryA
GetPrivateProfileStringW
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

DrawMenuBarTemp
DrawMenuBarTemp
DdeInitializeA
GetMessageW
MessageBeep
IsCharUpperA
ToAscii
LoadCursorFromFileA
AlignRects

Sections

.text
Size: 5KB - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE