NEAS[.]b581c92f7452edada39080e1b2f0bec0_JC[.]exe | Triage

Sharing

General

Target

NEAS.b581c92f7452edada39080e1b2f0bec0_JC.exe
Size

119KB
MD5

b581c92f7452edada39080e1b2f0bec0
SHA1

6cbb89979c3c93a8d3dae48ce24317c355f74bd4
SHA256

7585c5f1b88017397724f108704c301328a1a8161f2881824d53118374f5a7a8
SHA512

13bffc165371cf4ff235a02081b8cd17f2152c07284873a2dc30b9f84814b3f4dce18af676e05017d488fe178b978c5accccadbdf8f0329563d0dcb8a9636436
SSDEEP

1536:wtZTiycMM6UQADwWjKyXfKOZdTTBsZQvmpfulq8iJjQsECtxav7SJb5wAB7l0g/Z:IRaQUwWu9O/TAlpfgqxEsEg8S91/MU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b581c92f7452edada39080e1b2f0bec0_JC.exe

Files

NEAS.b581c92f7452edada39080e1b2f0bec0_JC.exe
.exe windows:4 windows x86

38d8f1774e2ba7e3dadda2cc6e9ab894

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWowBaseHandlers
GetSystemDirectoryW
BaseElevationPostProcessing
SortGetHandle
DecodePointer
NtVdm64CreateProcessInternalW
GetConsoleFontSize
SetComputerNameW
SetSystemPowerState
_llseek

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE