NEAS[.]20fc83533e2e7ea210e0360917450af0_JC[.]exe | Triage

Sharing

General

Target

NEAS.20fc83533e2e7ea210e0360917450af0_JC.exe
Size

66KB
MD5

20fc83533e2e7ea210e0360917450af0
SHA1

96c594aab2ba87234650ad7248bbeb748b22498a
SHA256

9f1f225f89abe32427073cec648570b23f4d97545b1dbdb928be6c7f2b99739b
SHA512

5f092727b0913bb83024b9c1874092e0c66ada12eb47882332fce039bdf2d3a1fa3e988c2236239e9c9d16e4720788ff40d34cff7b30e472afbcf8063b9cda43
SSDEEP

1536:2ZucuWPBUAQwzCcDfbBqKv5pLg40a/PYfrjWBsg:pcjUA3Cy9tv5pLgW32H3g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.20fc83533e2e7ea210e0360917450af0_JC.exe

Files

NEAS.20fc83533e2e7ea210e0360917450af0_JC.exe
.exe windows:4 windows x86

34fc228c1557719cb661e8af44366aea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WakeConditionVariable
InterlockedExchangeAdd
NeedCurrentDirectoryForExePathW
LoadResource
GetSystemDefaultLangID
MapUserPhysicalPagesScatter
Module32FirstW
EnumSystemLocalesW
OpenWaitableTimerW
LoadStringBaseW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE