NEAS[.]0be81a45745ac21cefbd714468593031_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0be81a45745ac21cefbd714468593031_JC.exe
Size

268KB
MD5

0be81a45745ac21cefbd714468593031
SHA1

95ec746f4fe13803f203668412699b1cf57d50eb
SHA256

1f00df6f2dc26513c908cee74bf6b04b51566979984875a4c7b1b4fac7b7c91f
SHA512

d36e80d8e69fd176ba290edb9e10ec7c1ae58f0778f86a88db1dee3257f2a8152af86a24442d547dd3b03ad914ea5a57d35603dacab31031ca1a70497509f8fc
SSDEEP

6144:VCvDtwHIeVm385XX+QOpFcDdYiso5iSM3Omlc67NyYeV:YvBwocm3843pWgoYSNtqNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0be81a45745ac21cefbd714468593031_JC.exe

Files

NEAS.0be81a45745ac21cefbd714468593031_JC.exe
.exe windows:4 windows x86

6770306210ff27e2b482c81a59daa785

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZOpenFileA
EnumTimeFormatsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetConsoleAliasesW
HeapLock
Process32First
WaitForSingleObjectEx
VDMOperationStarted
SetSystemTimeAdjustment
SetCommState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 54KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 70KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE