NEAS[.]08594424a0bf2d5761b4648e71c0ea20_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.08594424a0bf2d5761b4648e71c0ea20_JC.exe
Size

66KB
MD5

08594424a0bf2d5761b4648e71c0ea20
SHA1

135217b2c36223a0e1e1c5b322a579481524fdea
SHA256

9e1759a3d63d3de7f2b520478fee8aa784c37a28a4f94ac68719eb252664f5f6
SHA512

5c695aa1f7b2930c7d23de904beefebbe44b9d970893e83371e883a85de935bb827fe2154324fb7baddaed5874660b42f6d23ce89a20ae97f34bbc43cd745ffd
SSDEEP

1536:oxsY9YH3bUEtaR4RG4Sptilnp2bxndXDwfIXp89j:oh9YHIEtaR1Jpti1p2bxndXEwZuj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.08594424a0bf2d5761b4648e71c0ea20_JC.exe

Files

NEAS.08594424a0bf2d5761b4648e71c0ea20_JC.exe
.exe windows:4 windows x86

b1ae140383377c372c6ad7e2098f6ff1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemGeoNames
SubmitThreadpoolWork
SetMailslotInfo
Module32NextW
GetPhysicallyInstalledSystemMemory
GetCompressedFileSizeTransactedA
EndUpdateResourceW
LeaveCriticalSectionWhenCallbackReturns
VDMConsoleOperation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE