NEAS[.]167eeef13894dc145acbc510fb3fab50_JC[.]exe | Triage

Sharing

General

Target

NEAS.167eeef13894dc145acbc510fb3fab50_JC.exe
Size

66KB
MD5

167eeef13894dc145acbc510fb3fab50
SHA1

2637b6f55cfb0c87c2490da56f96bdb0b2114d10
SHA256

4eac16534a3f6610a2ac1ac5117861fbdefdd9accec02b236eea4cbdbc162900
SHA512

38ccadcae7efe93d59051bc41f84bbb0cc6f56ca6cfa90556e911df2bb59adf2556f2e775cd17643415d7765a5340226c75273816451fdddf51b02869a0d51e6
SSDEEP

1536:T0P7wfcKMst4bCGoSsHlKZn344J1TOfzf3pFBYAvUhfAqn:TcwfcKMsKCS+lKZn3nJ1w3qdfAqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.167eeef13894dc145acbc510fb3fab50_JC.exe

Files

NEAS.167eeef13894dc145acbc510fb3fab50_JC.exe
.exe windows:4 windows x86

793ac99e1c39397ba4f2df00165a0152

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultGeoName
FindAtomA
AcquireSRWLockShared
InterlockedIncrement
CreateMemoryResourceNotification
SetHandleInformation
CreateEventExA
GetApplicationRecoveryCallback
IsSystemResumeAutomatic

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE