NEAS[.]10eece791adb626ea1698b31c96619b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.10eece791adb626ea1698b31c96619b0_JC.exe
Size

66KB
MD5

10eece791adb626ea1698b31c96619b0
SHA1

ea35835005ad3a7ebf44dfe74eec566ee971a549
SHA256

56ec62d1aeba7e7c623ca69203b36ae25df1f3ece49e2660b59c2fdb83998518
SHA512

4763a5dd74b3b97e32487ae30a25f43a7849458a82ff8cbebb7fa17fbd78a8934309f70764a428dec3102b5840164d3e8132f6ad58ccf00ecc75d786845184f3
SSDEEP

1536:aSumwSwPKlSyp8PS7+u+SG3/fvzHgcWR2qWKpoR0lOO:armwSwClX4SC8G33vzAf/i0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.10eece791adb626ea1698b31c96619b0_JC.exe

Files

NEAS.10eece791adb626ea1698b31c96619b0_JC.exe
.exe windows:4 windows x86

18eb426c0783e16c475e6ca21015e355

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlCaptureStackBackTrace
FindFirstChangeNotificationA
GetFullPathNameTransactedA
GetSystemRegistryQuota
FindFirstFileNameW
CheckElevationEnabled
GetMaximumProcessorGroupCount
GetBinaryTypeA
WerGetFlagsWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE