NEAS[.]00132e0cb39ca9726339ebeb345b53f0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00132e0cb39ca9726339ebeb345b53f0_JC.exe
Size

63KB
MD5

00132e0cb39ca9726339ebeb345b53f0
SHA1

f9df2c4814e88c9484af4a4b703753683c986216
SHA256

502fb66e6d16ffc085e0d8f1d855c091ad0a9115618c92749df00209c4c8e830
SHA512

2408a6ae95928e3b9c7db0981dc62b283a04bac01d09b52ac9d8bde6b9b7b685e83635d6a32df42172cb7ceb0e1ddc72dab48b5c7b6c82a95b5acfa7064a5272
SSDEEP

1536:AMT4hevTtF0KwH8M2VjOOtyWXuJV5TPNNbUumm19DuOvE8ijS:AUdvTjjU8MipoBTzWG97xijS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00132e0cb39ca9726339ebeb345b53f0_JC.exe

Files

NEAS.00132e0cb39ca9726339ebeb345b53f0_JC.exe
.exe windows:4 windows x86

c273547c8f35d5dd740f69cd55f0415c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PostQueuedCompletionStatus
GetFileAttributesW
LoadModule
GetTimeFormatA
DelayLoadFailureHook
GetPrivateProfileStructW
SetMailslotInfo
SetLocaleInfoW
ReleaseActCtx
GetDiskFreeSpaceW
GetStringTypeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE