NEAS[.]190f7a20327eb35c5b50bb5f27515b10_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.190f7a20327eb35c5b50bb5f27515b10_JC.exe
Size

119KB
MD5

190f7a20327eb35c5b50bb5f27515b10
SHA1

345173a65dd1c204f0e53f272738173c95cc976d
SHA256

1025e7d67dc59bbd76c6cb1f1234ed482cac5ed6fcfb9d7b1bf88988d1470d4b
SHA512

ece8b23806df903661d6775d75cdf72e53a57f735f8efbdc5d96f22b3f95ef87d1abef95914acc76488590ef769a3f2684993f56fe2955c8c65b5bcc152d17fc
SSDEEP

3072:Hgc/4Nnu1Bchs0hp1C8EzugSwcZn6gIUAVpOaN:HgLNnu1Bc2yy8LjZ6gIfVpOaN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.190f7a20327eb35c5b50bb5f27515b10_JC.exe

Files

NEAS.190f7a20327eb35c5b50bb5f27515b10_JC.exe
.exe windows:4 windows x86

27f36946b9bb73e73c8e8eb8ef3593d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueueEx
GlobalUnlock
GetCurrencyFormatEx
WerpNotifyUseStringResourceWorker
GetPhysicallyInstalledSystemMemory
WaitForSingleObject
BasepCheckWebBladeHashes
SetProcessAffinityUpdateMode
GetConsoleScreenBufferInfoEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE