NEAS[.]0b007d7598685afdc29faecd436313a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0b007d7598685afdc29faecd436313a0_JC.exe
Size

63KB
MD5

0b007d7598685afdc29faecd436313a0
SHA1

712063275aaedc529f49aff2d96eabf858c68160
SHA256

41cb8ef43d8a5340a65bf130680f49007deb7c218bd1d37ab3b94a2a9a402803
SHA512

14b7ad7aa23ebb129f8c5b6e9fc1ebbc97648dffef6f2ad6666b6a662a9e178b619c31bbeeca61d3792e98f2665669bc3b15ed1cd0e9d02a2e0a603e56632804
SSDEEP

1536:rh5k3HMk7PFwbUqnufHS3iRcoGlACNUzZSNBsop0BN:/k8NbeHFhGZUFSNBzoN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0b007d7598685afdc29faecd436313a0_JC.exe

Files

NEAS.0b007d7598685afdc29faecd436313a0_JC.exe
.exe windows:4 windows x86

c63c841a7711e377bbf63281825ad361

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedPushEntrySList
SetHandleInformation
VirtualLock
WriteConsoleOutputCharacterA
CancelTimerQueueTimer
GetWindowsDirectoryW
DebugBreak
FindClose
DebugBreakProcess
WriteProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE