NEAS[.]0200cc63916eff9cb12d17b956b7ac00_JC[.]exe | Triage

Sharing

General

Target

NEAS.0200cc63916eff9cb12d17b956b7ac00_JC.exe
Size

66KB
MD5

0200cc63916eff9cb12d17b956b7ac00
SHA1

ccc4a1cc520beaf26ad3d9690b7319fc3711f9f9
SHA256

a35d4f6b196deb1bc080328800400bb47ffe2b3c9e2ea047ac47187852cd9309
SHA512

68a23ffba8aee6d314be90bbd66b65b9ba65e050871f50eab9857eabba74f279a5e178e337d622fa2bf4e296f230a0a29833af82860b27209fe6f552367f3600
SSDEEP

1536:EiMOREkRVG1/j4Ov3siNDt2PqNxnXJQCxe3Yps5BwZ:EPOOC01VvNNnKKQBy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0200cc63916eff9cb12d17b956b7ac00_JC.exe

Files

NEAS.0200cc63916eff9cb12d17b956b7ac00_JC.exe
.exe windows:4 windows x86

f8f59a56c43f01420e85139e7867311c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarDifferenceInDays
ResolveDelayLoadsFromDll
SizeofResource
SetEvent
GetSystemCpuSetInformation
DebugBreak
SetVolumeMountPointA
WerUnregisterFile
RegQueryValueExW
ReleaseActCtxWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE