NEAS[.]10bc20b355755ad96b36866561b81900_JC[.]exe | Triage

Sharing

General

Target

NEAS.10bc20b355755ad96b36866561b81900_JC.exe
Size

66KB
MD5

10bc20b355755ad96b36866561b81900
SHA1

8e07efeca5664362447dc59c648daf41f09f6136
SHA256

57d42e84a38ef74fd2431c7642c202fff0469205ece263cb3d8475f44904789f
SHA512

0fa2b577e01accf54d2f9eee4b7f1c8bc91ccbe368f79e8cb6146e3843b00ce768343d1bab7807e4103816e2b2ae03f71490caccfe79e0daa171cb9115bd0178
SSDEEP

1536:qLQsikf8AWQNKDIIwJjK8Vw/OxLoV002vnxSOw2FGlM0ib5Epjk:qEVSxWDRwg8qHYxZtz7elk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.10bc20b355755ad96b36866561b81900_JC.exe

Files

NEAS.10bc20b355755ad96b36866561b81900_JC.exe
.exe windows:4 windows x86

847c7952e37b4cb773577c90a0420baa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileShortNameW
WriteConsoleOutputCharacterA
GetXStateFeaturesMask
CheckAllowDecryptedRemoteDestinationPolicy
GetStateFolder
GetNumberOfConsoleFonts
GetNamedPipeClientSessionId
GetProcAddress
SetDefaultCommConfigA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE