NEAS[.]e0eeb18cdef00d73a8ef8e27774cbf40_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e0eeb18cdef00d73a8ef8e27774cbf40_JC.exe
Size

119KB
MD5

e0eeb18cdef00d73a8ef8e27774cbf40
SHA1

8533092bdaefd17f8c20e178b0dbdbcd4711a84c
SHA256

6461beaada9859c21cb9b04305c50af6e6b01b9c02a95b206f92ae58be27533c
SHA512

da2be831ecf3d71167ab29c20c1801ae6f104b42ff1d98b363d8abf7b77d6918e98d5141de313ada529882789e305ab6a12f6f1ecebf1e9467358fea017f8468
SSDEEP

3072:Yh/7yYEYiK1uUYarXPe2bDv/FeJYlbxGQYcZo6QH0yDEzAMC:Yp7rksfP3FdlbxGAo6M0Gf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e0eeb18cdef00d73a8ef8e27774cbf40_JC.exe

Files

NEAS.e0eeb18cdef00d73a8ef8e27774cbf40_JC.exe
.exe windows:4 windows x86

42a95031879783463d4a8facc7088d70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDurationFormatEx
OpenWaitableTimerW
OpenProcess
GetProcessVersion
GetProfileSectionW
BaseGenerateAppCompatData
GetNamedPipeHandleStateW
GetUserDefaultGeoName
CreateFileMappingA
EnumResourceNamesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE