NEAS[.]5fd09fcbd3bac869681e6214996dad50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5fd09fcbd3bac869681e6214996dad50_JC.exe
Size

119KB
MD5

5fd09fcbd3bac869681e6214996dad50
SHA1

5436d76c6d45ee111dbb75fdd8430fec43fda183
SHA256

a1f78941621b76f0f267a309dee14c59795c4589c747fd35bed40ba5d71c9d61
SHA512

cc740d9366b13ca5c7241020c77292065d11b9f27322bb69056af384e7250808e5a419ce2eac1e155e4fc43016201166b19318daa8ab24c991e4062639f2434c
SSDEEP

3072:T1tpLSxm1tOG8rLR9uk70FHq6EO/at4iFujtDUVJ3:Dp2xm3O9prwFHfEiiFujtDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5fd09fcbd3bac869681e6214996dad50_JC.exe

Files

NEAS.5fd09fcbd3bac869681e6214996dad50_JC.exe
.exe windows:4 windows x86

e3d78d296d8bbadeea5e157711f8bb96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringA
GetPackageInfo
EnableThreadProfiling
AddVectoredExceptionHandler
SetConsoleCursor
MapViewOfFileExNuma
DelayLoadFailureHook
GetProductInfo
FindFirstFileA
GetProcessPreferredUILanguages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE