NEAS[.]0f7e55decc82dd262bb1ec295fbf0f90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0f7e55decc82dd262bb1ec295fbf0f90_JC.exe
Size

66KB
MD5

0f7e55decc82dd262bb1ec295fbf0f90
SHA1

93857121ae61ff5294afe3380de0bd456e356fb8
SHA256

245a6283b6bcf74f56e0cbdb655652abc7730979ccba559e76467a0db64300f5
SHA512

f8ce8739868a6643973af9d16cc83979311889272ee5feec13a8658642e7c0bd222de2f210de157f1fc21b84f25ac04c1610a5989cc9968825c8796babec8e93
SSDEEP

1536:ilHRxUYEo05GvhT56MQFCuoTfMguv13eGnOIkSsHxhFYbOiQaAZcQOgXS8:il//I525UC6gMeGnODS2hqbOiQXdp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0f7e55decc82dd262bb1ec295fbf0f90_JC.exe

Files

NEAS.0f7e55decc82dd262bb1ec295fbf0f90_JC.exe
.exe windows:4 windows x86

b8065983a8992cba75a5dd4f40f11159

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPreferredUILanguages
GetCalendarWeekNumber
FindNextVolumeMountPointA
K32GetModuleFileNameExW
K32GetModuleFileNameExW
LocalShrink
TlsSetValue
GetThreadIOPendingFlag
CreateMutexW
RegSetKeySecurity

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE