NEAS[.]1506902400a77f96cd28c323e4b74c10_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1506902400a77f96cd28c323e4b74c10_JC.exe
Size

66KB
MD5

1506902400a77f96cd28c323e4b74c10
SHA1

9b689ff06c6d9ab19ef37ffe342df7ccbbc443cd
SHA256

64264b2a0cb16ba53b639c395f6912de756d3b6ec7680e3bbb31f26fbd5a3c7a
SHA512

6abb2098a1c3419273f2b44d24f64b8a92dbc8ae8f30cbaaf0ba09e475a35012a6ce4ec5e10e6ad858e98f0664f2df78f9768b3c4bbdd453e07dbb7b7b330308
SSDEEP

1536:v87JCgLoIxpKVwP0d7pdsJerMyJNsjt0zh+zjNE5k49ezaNaxXx:v8tCgLoIGPmMrMy7sJ0ItE5k0SaNEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1506902400a77f96cd28c323e4b74c10_JC.exe

Files

NEAS.1506902400a77f96cd28c323e4b74c10_JC.exe
.exe windows:4 windows x86

e0fca135a07279ce646cf55587502c53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingFromApp
GetProcessInformation
WritePrivateProfileStringW
CloseThreadpoolCleanupGroupMembers
SetConsoleInputExeNameW
ReleaseSRWLockExclusive
QueryIoRateControlInformationJobObject
WaitForMultipleObjectsEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE