NEAS[.]49579fbdc4307fd3fd84191cec850886_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.49579fbdc4307fd3fd84191cec850886_JC.exe
Size

185KB
MD5

49579fbdc4307fd3fd84191cec850886
SHA1

1fe01408863501e14df820d512119a9bbe86a06c
SHA256

73de91cb0eb2f3c7221c1d7f0f5ca5a93fd6343c8d56a89bc6b76d1fa039fcc4
SHA512

a1f4d2364b67ecfba8de05bc3978e0586c780735b110c8a1e2f64dd3c9573b7a6382778b02c0216c3baeff850cdc2ee75ca974103fac9d7a88b8dc8dda89e91f
SSDEEP

3072:yEhzwC7OY7vFnpfcori/NRgxrvIScj3znsdfTSD1GAQq0SqlXDYZkr0qnfetvimb:yEhzwC7r9npnER+rvZcfnsdf8UpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.49579fbdc4307fd3fd84191cec850886_JC.exe

Files

NEAS.49579fbdc4307fd3fd84191cec850886_JC.exe
.exe windows:4 windows x86

063cb4c1a4e02c010bdd627ebae74731

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleLocalEUDC
_lcreat
VirtualQuery
lstrcpynW
EnumResourceNamesW
FlushConsoleInputBuffer
GetSystemDefaultUILanguage
EnumResourceNamesW
GetFileAttributesExW
ReadConsoleOutputAttribute
EnumCalendarInfoExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE