NEAS[.]1d25b5da03fad16f11b19fc7fe8d75f0_JC[.]exe | Triage

Sharing

General

Target

NEAS.1d25b5da03fad16f11b19fc7fe8d75f0_JC.exe
Size

66KB
MD5

1d25b5da03fad16f11b19fc7fe8d75f0
SHA1

b21028913d859d3184fed704a0a7f20ec595c166
SHA256

18a58208a9e380677e8b7aadeaf3211fd2fa2e95c4302946334541214f5a089b
SHA512

2153f72a07607b182ae8583e2db9354795f748e03fc44e9c9e683c0bea3079213f06b50793a3441757b260bcbd659b8a17690bc5bc398244e3f085525de667be
SSDEEP

1536:jzNmpP7vXsptRyV1PkMP73PLcYU6f3fH9zatLRaMxPw7Vd5SM:jz4PzX4RaRz7fAYUk3fdGFC1N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1d25b5da03fad16f11b19fc7fe8d75f0_JC.exe

Files

NEAS.1d25b5da03fad16f11b19fc7fe8d75f0_JC.exe
.exe windows:4 windows x86

1456d636190980d8e9043096665cb443

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PssWalkMarkerCreate
NeedCurrentDirectoryForExePathW
GetSystemPowerStatus
WriteProfileSectionA
InterlockedPushEntrySList
DeleteTimerQueue
InitializeCriticalSectionAndSpinCount
WinExec
InitOnceComplete

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE