NEAS[.]01e000316dc8d9dfdf9e5d0cd6e47a90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.01e000316dc8d9dfdf9e5d0cd6e47a90_JC.exe
Size

320KB
MD5

01e000316dc8d9dfdf9e5d0cd6e47a90
SHA1

04d862e966fcd87cbb1697eac8e7639c2179a554
SHA256

24030b746cd2076a73d2c61c97143cad7808213cfe298ced9645a6891e8bedf2
SHA512

9ce3373743ad495e278ca16c8c825affb6bf22c8751a3698a05e04dafd23b1ef3b09e35d1d3ee626128ea5aed780d98caf02602370f7bb7b71a4b820bd9c0a7c
SSDEEP

6144:Upfcv2+Yk2F/H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:CO2NlFv2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.01e000316dc8d9dfdf9e5d0cd6e47a90_JC.exe

Files

NEAS.01e000316dc8d9dfdf9e5d0cd6e47a90_JC.exe
.exe windows:4 windows x86

ba8378c8f67eac0d787271094c7484e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
HeapWalk
EncodePointer
CompareStringW
CloseProfileUserMapping
Thread32First
GetNumaProcessorMap
ActivateActCtx
GetFullPathNameW
OpenSemaphoreA
SetConsoleActiveScreenBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE