NEAS[.]03de35e4e98543337e842d3305b89130_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.03de35e4e98543337e842d3305b89130_JC.exe
Size

66KB
MD5

03de35e4e98543337e842d3305b89130
SHA1

4bb69d3dec0c366202eb2dbd2fee4292f5130277
SHA256

ab01f30c6eb0bda79ad6b2d70cbdc4ea393fd0da51f7cf9e22be33d372cb2f1c
SHA512

8c83f9f6de2f997fe3602290c25acbc00f4867d0d5d16c70e3dae5c3aaff137880f0ac834fad04d7367089264b2b7f294feeab3eaafba6b1803216952965f8bf
SSDEEP

1536:vI2u18QuGV2EcMhxLSDeGR8SdyBsSvsOe8laoGCA:vIB18BGVvxLfGR8yyB5pe8laaA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.03de35e4e98543337e842d3305b89130_JC.exe

Files

NEAS.03de35e4e98543337e842d3305b89130_JC.exe
.exe windows:4 windows x86

f6d268fecf0b2c4b7f116c16f9ad683f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
FatalAppExitA
SetSystemTime
WinExec
BasepCheckWinSaferRestrictions
K32GetModuleBaseNameW
TlsSetValue
GlobalAddAtomW
SetConsoleScreenBufferInfoEx
GetVolumePathNamesForVolumeNameW
GetLongPathNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE