NEAS[.]0c945cf9a22808d5ae6e7c656a7c3c10_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c945cf9a22808d5ae6e7c656a7c3c10_JC.exe
Size

66KB
MD5

0c945cf9a22808d5ae6e7c656a7c3c10
SHA1

a801fd52369be0ad7205ce11b39ecda0bed80079
SHA256

1ebd18e61efc15fdca9e2d5ad616a1f35e776cd29c8ecf0741618e03a23656e7
SHA512

8936b86af22296a5909d476d764fd6a0f1428b5682f4cde0a9b5f746c474ccffb674c56fbe0787d34232c49020ca52d6ec481cbf9497cfe83db3818286cdda1e
SSDEEP

1536:pT6EvVU1r84cbUlphyFHHoluNCSGuYpItmRUvYZtRWioV8DYtRMNyi1:Qr8XbUl7WIEoSGuoIta1vRbRM7Zi1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c945cf9a22808d5ae6e7c656a7c3c10_JC.exe

Files

NEAS.0c945cf9a22808d5ae6e7c656a7c3c10_JC.exe
.exe windows:4 windows x86

0276f63f03da409d3ad1db3510a6ec3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerRegisterAppLocalDump
FindFirstVolumeW
InvalidateConsoleDIBits
DosDateTimeToFileTime
QueueUserWorkItem
SetCommBreak
CloseState
FindFirstVolumeA
RegisterWaitForSingleObjectEx
GetBinaryType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE