NEAS[.]1ac649bfa280adcd853ae1e2164ea610_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1ac649bfa280adcd853ae1e2164ea610_JC.exe
Size

119KB
MD5

1ac649bfa280adcd853ae1e2164ea610
SHA1

3069830248a9415083ec513699e02b6b9c4c9325
SHA256

f95e3b56ba6d70a7030624ede952d7cb7e0471b99c52c18d20a2750316900448
SHA512

53375cf1f0f547d5ca84a835ec51120d9cf82d36204fff06e2c00de122e374e7543b09c6b2468b6b2773a0702b6bdcb2e3caf09e265ae22fd73302ab76a5c1a0
SSDEEP

3072:bdwUZ8yzFnjMSN2MpKQjos4YT8M1t4vs9/Le:bdRHRnjMSNt4Ns4YT8MiU9/K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1ac649bfa280adcd853ae1e2164ea610_JC.exe

Files

NEAS.1ac649bfa280adcd853ae1e2164ea610_JC.exe
.exe windows:4 windows x86

1f0e21ad44252455797a0f4deb5e6d26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNLSVersionEx
FreeLibrary
MoveFileA
RegisterWaitUntilOOBECompleted
LockFileEx
GetComputerNameExW
TermsrvSetKeySecurity
CreateRemoteThread
TryAcquireSRWLockShared
BaseCheckElevation
SetLocalPrimaryComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE