NEAS[.]1650baa4461dd2f58b6e877dce445160_JC[.]exe | Triage

Sharing

General

Target

NEAS.1650baa4461dd2f58b6e877dce445160_JC.exe
Size

66KB
MD5

1650baa4461dd2f58b6e877dce445160
SHA1

f201413798982dbf27a164c6eb3c315cebd7f16a
SHA256

6cd2733ff0392482438738f7463fb946f62752ca4156b96c66d86c04f3bd181d
SHA512

0f7a886e959b013bad7bf90fde2a9821753d76bed264689c3100ef2bf724ef6e85a5c8597c81d26a83738f2f5689a0a165e22ee5cf28541568c80f50bc4b0a64
SSDEEP

1536:1Ax4vbJhv8IBuob4fHFIQhANrk9mtyU6ygtgxgV0mizGEn4:1UoZ5oFIJGmtEu00m2n4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1650baa4461dd2f58b6e877dce445160_JC.exe

Files

NEAS.1650baa4461dd2f58b6e877dce445160_JC.exe
.exe windows:4 windows x86

70bd2880eda20f42a168c605631fc443

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
MoveFileExA
NlsUpdateLocale
CreateTimerQueue
RemoveVectoredExceptionHandler
GetEnvironmentStrings
GetLogicalDriveStringsW
GetCalendarDateFormat
SetFileShortNameA
ConsoleMenuControl

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE