NEAS[.]3a333cc178414b96a893556f4c4422d0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3a333cc178414b96a893556f4c4422d0_JC.exe
Size

66KB
MD5

3a333cc178414b96a893556f4c4422d0
SHA1

136dbd9313c736b8c1d0f22cecad4dfdce225d92
SHA256

af4a69d1aab091901a81a48ac327ab81a484c57e3d75ea29c76dc8d2ea0cf727
SHA512

e7992eb1c9ef70408ab4c4226de55d05f1c70ff340691771c760e12b1a37b41ce82826a6044001878034a7daf90daed175e8d1022bb1aa978aa7bbf751e17eae
SSDEEP

1536:1Hx9cKYP/5vNw9kd+/TotJbpXZitSbpHErqPmnjXS5/:l8KW5yyo8tJbpYtSbpHROy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3a333cc178414b96a893556f4c4422d0_JC.exe

Files

NEAS.3a333cc178414b96a893556f4c4422d0_JC.exe
.exe windows:4 windows x86

55d31ef0f3c9e3eff398a587d8538040

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
SetCurrentDirectoryW
ConvertDefaultLocale
GetDateFormatA
CreateSymbolicLinkTransactedW
GetPackageFullName
DosDateTimeToFileTime
LoadStringBaseW
DeleteFiber
WriteProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE