NEAS[.]6117e048432b7ae15dcf2374f6ff77b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6117e048432b7ae15dcf2374f6ff77b0_JC.exe
Size

119KB
MD5

6117e048432b7ae15dcf2374f6ff77b0
SHA1

88e100d8fe04b923e4641d503ba2a2abe9537f5f
SHA256

03b23c17dace93a1e9ba9baf30fcc74c553e820f5a1aed326ecb4ea51493cc0c
SHA512

7dd317d53e133a8e324d9fa39e5b50c6b71177ac5365e09a1fc6e3b53bc16d1d263414d93bcd43ead172aafc129eb1bb69ecc0706799d8911bae79813b2d53a5
SSDEEP

3072:S5nAzMcpUB+pVG3vEccKSc83WdWXc59k7mKJVTlUzMac:HzJpU0IbzJycXk/bT+gH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6117e048432b7ae15dcf2374f6ff77b0_JC.exe

Files

NEAS.6117e048432b7ae15dcf2374f6ff77b0_JC.exe
.exe windows:4 windows x86

e3e4a881112a8f17659b0acf46b0772f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFileEx
MoveFileTransactedA
ReleaseSemaphoreWhenCallbackReturns
GetConsoleProcessList
ReleaseMutex
GetComPlusPackageInstallStatus
SetDllDirectoryW
PssWalkMarkerCreate
CreateTapePartition
K32GetProcessImageFileNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE