NEAS[.]2578e0990f1534e03552151aa7082a30_JC[.]exe | Triage

Sharing

General

Target

NEAS.2578e0990f1534e03552151aa7082a30_JC.exe
Size

66KB
MD5

2578e0990f1534e03552151aa7082a30
SHA1

a36f9c711feb1c8d6c6cbbd4ea15f847a74fdb8d
SHA256

c12b3c1f1a996d1331e242d0724d89281c19078a6524bf8dfe14cd4677fd5e23
SHA512

4b048155f6c541f484b66a3594a973bd1a571b93dfa60eb8eaba40c2fc908644c7fa4cd4ad03cf5352aad3542755507d9ca37c2f5d3d9afede8534737ec49851
SSDEEP

1536:iszQrz6R4OWUp52oXDSScG/z77l0SpqOz+ObMsDVO5JaA7jJ:isoI4dK7XpL77fPzB3VO+A79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2578e0990f1534e03552151aa7082a30_JC.exe

Files

NEAS.2578e0990f1534e03552151aa7082a30_JC.exe
.exe windows:4 windows x86

adfdda232328939b8da33e5cd9ea4b13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileSectionW
InitializeEnclave
BeginUpdateResourceW
GetCommandLineW
GetProfileStringA
IsValidLocaleName
BaseDestroyVDMEnvironment
GetConsoleCommandHistoryW
LocalLock
RegEnumKeyExW
GetConsoleSelectionInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE