NEAS[.]e08c43c62df5bb8c1c6e6a7988f6fb10_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e08c43c62df5bb8c1c6e6a7988f6fb10_JC.exe
Size

119KB
MD5

e08c43c62df5bb8c1c6e6a7988f6fb10
SHA1

63ec4e2d8a5baded0c83a22ced78b36fb7e7a1da
SHA256

e77eb3e6a524d810948f593ee14285c70afc4a0df6c81d1ae2412b18f954faef
SHA512

20ed9f4ca18ff4d099a1ce6419cb37c19634533f38b65b17d28bfa1f5163ba2c7da6555383c96b754d3d39f586be99d7b96789a234a28d7cec37027dae6f298f
SSDEEP

3072:YwOqqdy21Djnd9QjHUknOax7+nY4gF0mBsDLv2wdXW:YVRLBDQjHUI3x3yf2wI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e08c43c62df5bb8c1c6e6a7988f6fb10_JC.exe

Files

NEAS.e08c43c62df5bb8c1c6e6a7988f6fb10_JC.exe
.exe windows:4 windows x86

58474a8349261d15283c2acc10543299

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleContext
CreateEnclave
AdjustCalendarDate
GetComputerNameW
GetLogicalDriveStringsW
CheckAllowDecryptedRemoteDestinationPolicy
ResetEvent
RegDeleteTreeA
PackageFamilyNameFromFullName
SetLastConsoleEventActive

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE