NEAS[.]0e9f58255ae5e59e8271ba90c6230740_JC[.]exe | Triage

Sharing

General

Target

NEAS.0e9f58255ae5e59e8271ba90c6230740_JC.exe
Size

66KB
MD5

0e9f58255ae5e59e8271ba90c6230740
SHA1

60ebcf462f5546a621f63fda6bf04186130b4320
SHA256

6338e299089887e44ef859ba8208d84fe11f056f683145b0d8716f7717b85e58
SHA512

6a2fae935aa049caedd3eae06279381ed4c923371827294fdb6a14bfaae8e88e30e58cfd2b3b87ef8facaa1a387f0bef782741972391341bf36d4ae65d0187be
SSDEEP

1536:l6GwYqjpbgQjF6dW5NswtJI7JSsBEfcJF+DF2OqBYjAOJPJP+/2:YGNqXLDtJsJSsCsFQqBPUxP+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0e9f58255ae5e59e8271ba90c6230740_JC.exe

Files

NEAS.0e9f58255ae5e59e8271ba90c6230740_JC.exe
.exe windows:4 windows x86

55af841d1e60c4988b4dea179e70f17e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseFailFastException
RemoveVectoredExceptionHandler
SetThreadUILanguage
GetConsoleFontSize
OpenSemaphoreW
SetFileAttributesTransactedW
GetNumberFormatEx
SetThreadpoolWaitEx
QuirkIsEnabledForPackageWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE