NEAS[.]bf8b313fd66e20e02e7bba5be49a6c30_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bf8b313fd66e20e02e7bba5be49a6c30_JC.exe
Size

119KB
MD5

bf8b313fd66e20e02e7bba5be49a6c30
SHA1

ce9da54e9a750ae2f87225d878f23fdbef82d98f
SHA256

3268b3b49964c793072ed0f25e2df79a89c5579134daff706ae878c5b45e2406
SHA512

d03e20983aafbbcb76c03594ead2dbbc72c5a2e76b8cc9cfb4d717143e50c66aaec252b8093e4a9909a64f7e987c68c1526ba9ce6c064da2a156e0cdc0057b80
SSDEEP

3072:/myMNXDJOhR1r8vQJ37k7B/jOPFrBhsODGLmba1Hq:ObXDmDIQZ7kN/jOPXhsODGLmbiq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bf8b313fd66e20e02e7bba5be49a6c30_JC.exe

Files

NEAS.bf8b313fd66e20e02e7bba5be49a6c30_JC.exe
.exe windows:4 windows x86

18e736e67a3bab6ee63ce21ebc17ee4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProfileUserMapping
GlobalHandle
IsValidNLSVersion
NotifyUILanguageChange
GetHandleContext
ExpungeConsoleCommandHistoryW
GetCommProperties
GetTimeFormatW
GetLongPathNameW
EnumUILanguagesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE