NEAS[.]8c7328c0cee287032ba2d05564e27f00_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8c7328c0cee287032ba2d05564e27f00_JC.exe
Size

119KB
MD5

8c7328c0cee287032ba2d05564e27f00
SHA1

04dc258549a98f0eece89d89dd0e4e84d0839ada
SHA256

f975f550a1c5d052fcca53046f5ed7cac6252a222b9c375ba894a8bfaeeae5e9
SHA512

6624e4e396ffd7e200077b0b5e862866d9f0771246bbad2eaa54aefe2012b85993a2fe35d447659e7ecf2e4c7a93d274d2e818d3f133a54922e98376af9f7c13
SSDEEP

3072:SgEyyuauubdNEJCUtJyFyAf6FiloSXgtyA:lyuagCchG3P2z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8c7328c0cee287032ba2d05564e27f00_JC.exe

Files

NEAS.8c7328c0cee287032ba2d05564e27f00_JC.exe
.exe windows:4 windows x86

1c8bba887ef4eddfcde522fafd919942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocateXStateFeature
GetSystemRegistryQuota
GetVolumeInformationW
_lcreat
CreateActCtxA
GetConsoleWindow
SetupComm
GetSystemDirectoryW
EnumDateFormatsExW
BaseDestroyVDMEnvironment
IsValidCodePage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE