NEAS[.]108d7992bb82dbfdff56f589ffa196b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.108d7992bb82dbfdff56f589ffa196b0_JC.exe
Size

320KB
MD5

108d7992bb82dbfdff56f589ffa196b0
SHA1

b2ed582981307e515b504ee1382e3554f070384a
SHA256

0de521da653557499e64ff429f04ee58f3227d8bd057341a74ae97046db09e65
SHA512

547af0b380f56e1ad81a714e725e17bbea16ec25661e86e336cf13b28fe82080dc5d41e382dab5e103c1e63143d9a07b75af325c5ba416685e2e9b3bec452081
SSDEEP

6144:lEpQxbH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:KQxT2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.108d7992bb82dbfdff56f589ffa196b0_JC.exe

Files

NEAS.108d7992bb82dbfdff56f589ffa196b0_JC.exe
.exe windows:4 windows x86

8abec0c9fbeadcfeacec35ed9f3c869d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
GetConsoleAliasesLengthW
CreateMutexW
GetSystemWow64DirectoryA
GetConsoleMode
SetConsoleCursor
ReadConsoleOutputW
HeapWalk
lstrcmpW
WriteFileEx
SetCalendarInfoW
BackupWrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE