NEAS[.]0fc7faa669988c1206b8a1e2954219a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0fc7faa669988c1206b8a1e2954219a0_JC.exe
Size

33KB
MD5

0fc7faa669988c1206b8a1e2954219a0
SHA1

d8e4b4b5cb0bd1979186979e01b8e9ff230ed3e7
SHA256

144dbb79ad521102649a5480ce07a1e56aeaebf9b9f3fc9a8ce42398667f36cc
SHA512

48ffe032a286121898223a079d1579001babdbe54d22a6c71cb11788ccd9f28d97326058436e8a9dfb2f604ed8ebdd49aae3c98c612d6ffd61a81dba115aec0f
SSDEEP

768:bz86dJKzoAGGOL3zUdBk4k0OeQfZxQxsz:bQ6dszoAVR/OX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0fc7faa669988c1206b8a1e2954219a0_JC.exe

Files

NEAS.0fc7faa669988c1206b8a1e2954219a0_JC.exe
.exe windows:5 windows x86

a43a38512da1f8b15e273b7213ff70e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW

kernel32

GetModuleHandleA
SetUnhandledExceptionFilter
GetCurrentProcess
CloseHandle
LocalFree
FormatMessageW
GetLastError
CreateProcessW
GetSystemDirectoryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter

msvcrt

_c_exit
swprintf
_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

ntdll

NtQueryInformationProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zvdqjne
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE