NEAS[.]07a2c2db329de6ea92a557439f940730_JC[.]exe | Triage

Sharing

General

Target

NEAS.07a2c2db329de6ea92a557439f940730_JC.exe
Size

66KB
MD5

07a2c2db329de6ea92a557439f940730
SHA1

060f830aff668531a2ec8a7d6a50e05efa3a5f01
SHA256

7ee0aba0425565d36e4d6a37f55a84cb78e644b49c854fda6d3a675290ba76b7
SHA512

64fd04b910ed7136061e411a1268199fc03fafd7e430b7dcc0b21a428fcc86c7243737d6b2115763754ad4be13e684a7f194b00ac91547e4beaa695d742b32e1
SSDEEP

1536:hlo9kEzxDo3LB+l4GNls6VaOhEqJWzRNPNtkps:I9zDo3LW4Seq8zNNPNt/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.07a2c2db329de6ea92a557439f940730_JC.exe

Files

NEAS.07a2c2db329de6ea92a557439f940730_JC.exe
.exe windows:4 windows x86

7aa19c4e8f365df1298026a4fe78d3b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseActCtx
GetPrivateProfileSectionW
GetThreadId
AddScopedPolicyIDAce
SetConsoleInputExeNameA
WriteConsoleW
SetConsoleOutputCP
EnumSystemLocalesA
OOBEComplete
RegCopyTreeW
NotifyMountMgr

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE