NEAS[.]0d44a99da53016c1ad0e1115bf7d7ac0_JC[.]exe | Triage

Sharing

General

Target

NEAS.0d44a99da53016c1ad0e1115bf7d7ac0_JC.exe
Size

66KB
MD5

0d44a99da53016c1ad0e1115bf7d7ac0
SHA1

754c16a6abdd069565d8f87f8ddd428dbe01f6da
SHA256

9e3c39c2c2ed57fbf9e265559057bea83b883de3bacb46100bc928222b07d9ef
SHA512

5018ff06f14c371158310051a6baa091190d38ebb918e0e24f4d78780b367e91a307e5c98116e4b748a0888b6d475141779a323e9101fb7e9ab87bb4bf2e65d2
SSDEEP

1536:dlHY0E1vsgbLdb9EWeEFpVyjpYGVsGxF84E5u:z2DLdbvBKpYGV9SO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0d44a99da53016c1ad0e1115bf7d7ac0_JC.exe

Files

NEAS.0d44a99da53016c1ad0e1115bf7d7ac0_JC.exe
.exe windows:4 windows x86

7bede90a9eb17bb064596133fadf82f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointA
GetConsoleScreenBufferInfoEx
FlushViewOfFile
lstrcpynW
GetAppContainerNamedObjectPath
CreateMutexA
RegisterWaitUntilOOBECompleted
GetApplicationUserModelId
CreateSymbolicLinkW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE