NEAS[.]130b1cb71902705f5f5486630c2182b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.130b1cb71902705f5f5486630c2182b0_JC.exe
Size

66KB
MD5

130b1cb71902705f5f5486630c2182b0
SHA1

07f75b507786663c27eda7fdef38b8c95dfc5c69
SHA256

fdc5365d8ac87b1a785f0e7c4ab32ea84c81b453a64d4066404e8255431f66e4
SHA512

9366017b5cc9d5140e9f846790bf6966e3fedb7c48741d5ac80da274636ef0b854ff5437d583a5181a2bb7aac3fedeadfc046e8f5a80c5ba40c0f88afce2e226
SSDEEP

1536:MEq8xpxzT8gZ3VRYyi/aqyqHRZWgFhN6Xf8PHe6R:MD8TugZ3YFyqrWgd6Xf8P+6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.130b1cb71902705f5f5486630c2182b0_JC.exe

Files

NEAS.130b1cb71902705f5f5486630c2182b0_JC.exe
.exe windows:4 windows x86

5286afe9056060930464879abc42e16a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
ReadConsoleOutputW
GetMemoryErrorHandlingCapabilities
LocalHandle
LZDone
FindNextStreamW
timeGetDevCaps
EnumCalendarInfoExEx
GlobalUnlock
SetTimerQueueTimer
GetThreadIdealProcessorEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE