NEAS[.]03a377cb6db0461efa17f3a2dc9e01b0_JC[.]exe | Triage

Sharing

General

Target

NEAS.03a377cb6db0461efa17f3a2dc9e01b0_JC.exe
Size

66KB
MD5

03a377cb6db0461efa17f3a2dc9e01b0
SHA1

aaf8136a0576dbd0049bd1d6398394c33e9da9a5
SHA256

e7c4264b8d90525f9614a18a22d3c0f578214d1b24e161210545f5e7ed70cbed
SHA512

5903c5ee60d0bd418ad9be2f6a1c87660332df7a0759a1976ff830ad81ae6a73cfddecfb86cff3667aa6763c91cc6ac81d7d5ae6c21a3ffb23fe69ad5e14fb7f
SSDEEP

1536:tSuH++2E97XorRYIFpR6lr9Au/ku2LIXJ9G:tSuH++17kzRo2iXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.03a377cb6db0461efa17f3a2dc9e01b0_JC.exe

Files

NEAS.03a377cb6db0461efa17f3a2dc9e01b0_JC.exe
.exe windows:4 windows x86

8e90fc2ba03db22ba6658d26d840107d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddRefActCtx
CreateFileA
BasepCheckWinSaferRestrictions
GetEnvironmentStringsA
FindNextFileW
MapViewOfFile
WriteConsoleInputA
OpenPackageInfoByFullName
K32EnumPageFilesW
GetCommMask
SearchPathA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE