NEAS[.]023cc4363004b98edacdaa16df4dac20_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.023cc4363004b98edacdaa16df4dac20_JC.exe
Size

391KB
MD5

023cc4363004b98edacdaa16df4dac20
SHA1

9c9a7531a13f92eca68d5a49096761f52f8799dd
SHA256

ea96927e2b6166a4d14af90bf7e3e244b374705b430db5102f026ffdeb345678
SHA512

03e8a0f2701b5c6c0850a49ec0d2bfecf13fb0b3b858b44384cf0e4e2ee39d5b114fd36140ceb68b5e59f0e62661c86de6d77ed7b7db59e02d2419a2e806276a
SSDEEP

12288:ILZmljX9FCFHNdN14MvQw6G7ipjWx2aX4E:2ZmljtFCFHNLWcN6xixHXN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.023cc4363004b98edacdaa16df4dac20_JC.exe

Files

NEAS.023cc4363004b98edacdaa16df4dac20_JC.exe
.exe windows:4 windows x86

0c02ecb111adb4acc32c4c4a6207144f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetTickCount
GetProcAddress
CreateMutexA
CreateDirectoryA
ReleaseMutex
DebugBreak
CompareStringA
GetLocaleInfoA
QueryPerformanceCounter

comsnap

InstallDsExtension

Sections

.text
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE