NEAS[.]32d9e0f6d4a731409ffb50787a4a0ac0_JC[.]exe | Triage

Sharing

General

Target

NEAS.32d9e0f6d4a731409ffb50787a4a0ac0_JC.exe
Size

60KB
MD5

32d9e0f6d4a731409ffb50787a4a0ac0
SHA1

266f1fedbf61bad51c831656b569a8b59bf8ead4
SHA256

179e70bf9721179f72e60d3798c51babb799eeec5ffcfd08645532be810af188
SHA512

16821315d9975cf8ea30fa51e660749c5dab0392a869397829a2a12bbf7bc9bf2257ecb8d6e31b0a7ecce76a0e768cb33c40bd60b7d31965b67b3989c0649247
SSDEEP

768:3i/My0p89+zxEbjakT725yBFkQF3CXnf5+NODzu1QW1N41wMr9uygSCyslOgv07v:7zK9P3EA6cyXfBuyWcr9JgS2Ogs76ZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.32d9e0f6d4a731409ffb50787a4a0ac0_JC.exe

Files

NEAS.32d9e0f6d4a731409ffb50787a4a0ac0_JC.exe
.exe windows:4 windows x86

1b7ca1033d6052d828a7a2243b66ed85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
DeleteFileA
CloseHandle
EnumResourceTypesA
GetCommandLineA
GlobalFlags
CloseHandle
CreateEventW
HeapDestroy
GetFileAttributesW
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
HeapCreate
GetDriveTypeW
lstrlenA
SetLastError
GetCommandLineA
GetConsoleTitleA
GetTimeFormatW

advapi32

IsValidSid
RegCreateKeyExW
IsValidSecurityDescriptor
RegQueryValueW
RegDeleteValueA
IsValidSid
IsValidSid
CreateProcessAsUserW
RegEnumKeyA
IsValidSid
InitializeSid
IsValidSid
IsValidAcl

cnvfat

ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE