NEAS[.]1764281dda1b8b85486c104633c59568_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1764281dda1b8b85486c104633c59568_JC.exe
Size

63KB
MD5

1764281dda1b8b85486c104633c59568
SHA1

0dc524e1a164fd75b44ea175154692ed85a58573
SHA256

13a89728f4f145824489d554caa97e58202102f2773ac7305a61ce89ccfe2483
SHA512

25bffae7f378cc5d3441cf900538b17615b0c88c7d2e689ed63f9abcd1ef9d1ae48673da3dc028f41a7e86d089a63bd1a00c9f537bbdcff4230010241e952b71
SSDEEP

1536:ee7Usjsq/cdpU4d4vBVTbQzzx2UROV7ghE7ZwrNDE6:ee7BxknU4dSPgzx2sk72E7on

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1764281dda1b8b85486c104633c59568_JC.exe

Files

NEAS.1764281dda1b8b85486c104633c59568_JC.exe
.exe windows:4 windows x86

988c1c32d29356314606c396f8350e7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnWire
InterlockedPopEntrySList
SetMessageWaitingIndicator
GetStringTypeExA
GetExitCodeProcess
SetProcessWorkingSetSize
GetEnvironmentStringsW
SetTapePosition
GetConsoleWindow
LockFileEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE