NEAS[.]09ea97dd68b2190f11c9dec723eca210_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.09ea97dd68b2190f11c9dec723eca210_JC.exe
Size

63KB
MD5

09ea97dd68b2190f11c9dec723eca210
SHA1

82d91b2c5f4e9bf4d2686c2dad4c6c984a54f27b
SHA256

9d6fcc9e22e1336712188169c4adb84b0c9726003a052b9ff23e6dd9bbf4466a
SHA512

247991c501a70951b0f0a8812681918531a61102c28cfe0d7581939d6aa12f705051ee77bc993b7c0497798ec00bc920943f6a8ae57e590b109a5952a25f3fbb
SSDEEP

1536:4CdPh2aUS4CM2YHXG0MwKSixtb0kW2HUF96AU+EUQm:ASzYQwKSStb0kW2HUF96AUk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.09ea97dd68b2190f11c9dec723eca210_JC.exe

Files

NEAS.09ea97dd68b2190f11c9dec723eca210_JC.exe
.exe windows:4 windows x86

585f5bea3e766796bd9f929b3ead771c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoW
RtlUnwind
GetThreadPriorityBoost
WaitForMultipleObjectsEx
FindNextVolumeMountPointA
WideCharToMultiByte
GetNumaHighestNodeNumber
GetCurrentProcess
GetSystemDefaultLCID
FillConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE