NEAS[.]500182ad24aa26761f0047b0dc106b22_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.500182ad24aa26761f0047b0dc106b22_JC.exe
Size

56KB
MD5

500182ad24aa26761f0047b0dc106b22
SHA1

65b46acc43aba9d7d6a1fac54bacd9547a046dfe
SHA256

0ef11fa7d0304c95c659f8f5fce51c4fab407cf1e664dd570ecc25b55f4f4fc7
SHA512

b479ec49b1dd0ea24f50e9a0afcf270c064b6cc48b197a0fa9c39e97c808cbc9bcde42f32a83006951d2402f37f67a170a808825f44b3f0a0474d275ff7c5a5c
SSDEEP

1536:Isl0DRinKWNxArMPoi13cBZrY4I83v0mi43ocWne:I2/Nboi13avI839ZYcWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.500182ad24aa26761f0047b0dc106b22_JC.exe

Files

NEAS.500182ad24aa26761f0047b0dc106b22_JC.exe
.exe windows:4 windows x86

4db42c297ea4937dbca2711433304171

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointW
FindFirstFileExW
GetPrivateProfileStringW
GetSystemTimeAdjustment
RequestDeviceWakeup
UTUnRegister
InterlockedPushEntrySList
GetConsoleCommandHistoryLengthA
CommConfigDialogA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE