NEAS[.]53d258a277e6a093a68a307fd61a4e70_JC[.]exe | Triage

Sharing

General

Target

NEAS.53d258a277e6a093a68a307fd61a4e70_JC.exe
Size

119KB
MD5

53d258a277e6a093a68a307fd61a4e70
SHA1

be8fb75651b4286adabeae75f9d6dfe4c75dc4c6
SHA256

e6eb13f4cd55e6fa17400cf5c76f0e89121c7f66b24f210180dd5f50bae060ae
SHA512

ef28da299da9f2640ba646679af83a6b9a31a7c00b3f72db864317412577f79889e25f7256d7d65f33aa241f1ff04cde2fe24829cca48f65398950129c02d51c
SSDEEP

3072:SUx/m+TrFO0xfqUJaKYW37YPGymdp38Z24UhEz0tul0j:7/mgZxfWKYaY+TdpoUhEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.53d258a277e6a093a68a307fd61a4e70_JC.exe

Files

NEAS.53d258a277e6a093a68a307fd61a4e70_JC.exe
.exe windows:4 windows x86

459e2419b034f70519ad96493f32c38e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CmdBatNotification
GetCommTimeouts
EnumResourceLanguagesExW
GetGeoInfoA
CreateProcessAsUserA
Process32First
_hwrite
SetConsoleTitleW
SetConsoleMaximumWindowSize
RemoveLocalAlternateComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE