NEAS[.]9d8bd1add1546f05e7ff78df3f9bf8d0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9d8bd1add1546f05e7ff78df3f9bf8d0_JC.exe
Size

119KB
MD5

9d8bd1add1546f05e7ff78df3f9bf8d0
SHA1

e85e92b83a501f932655ea60529c680801ec40b0
SHA256

61beee5d2a4e3ffe9e65a612ad8c08ed089f9b0f09a7fc0a82283e73f7f366a9
SHA512

fc6cae301cb9db2d69d03756d0bd12bdc362646932822a5b0de1f9ce2f0b5791368f4f183c0ebe50c5a9ad759457276b04f475a3f5f1e43f6413fa73f44cfeca
SSDEEP

3072:T+cXlIHvkq9SDK4Mg210rjKK/lPma9U4RKzMkj:C+IH8q9SDKSSf8PnU4czMkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9d8bd1add1546f05e7ff78df3f9bf8d0_JC.exe

Files

NEAS.9d8bd1add1546f05e7ff78df3f9bf8d0_JC.exe
.exe windows:4 windows x86

284ecd4ffda41c7f5be69e0617a25b70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFirmwareEnvironmentVariableExA
DisassociateCurrentThreadFromCallback
CreateDirectoryExA
WritePrivateProfileSectionW
K32EnumProcesses
GetCommState
SetComputerNameEx2W
GetConsoleAliasExesLengthW
GetNumaAvailableMemoryNodeEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE