NEAS[.]ff20d43f4eb63ac4a9485234730c9cb0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ff20d43f4eb63ac4a9485234730c9cb0_JC.exe
Size

66KB
MD5

ff20d43f4eb63ac4a9485234730c9cb0
SHA1

d0e2024da855d7198178c59c83586847b3111787
SHA256

7db6ada15982921708ba17a9ee820cd369e7ccc84f32100493bbb904a5ccc330
SHA512

04350ea97a409a15293883ad8aa53df314a9c2d7f44a7a25cbf85d3c041de3e194b76774cad7a3f001613c6b284927ab26a90de7a811377d23dc5bb7d4345bc9
SSDEEP

1536:uUsISgLR6sqIAfZlFw2ltXawXpMOEjsAvliDxESSS1hVWP:LTVq3hlq4KApgUNEXS1hQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ff20d43f4eb63ac4a9485234730c9cb0_JC.exe

Files

NEAS.ff20d43f4eb63ac4a9485234730c9cb0_JC.exe
.exe windows:4 windows x86

595c62fb014cbe6b386e4bfe0f91ee9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleNlsMode
GetProcessorSystemCycleTime
RegOpenKeyExA
GetNativeSystemInfo
ReplacePartitionUnit
InitializeSRWLock
SetFileApisToANSI
GlobalUnWire
AddConsoleAliasW
GetSystemPowerStatus
SignalObjectAndWait

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE