NEAS[.]69ca079b1d7540e12495b62e143f3070_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.69ca079b1d7540e12495b62e143f3070_JC.exe
Size

119KB
MD5

69ca079b1d7540e12495b62e143f3070
SHA1

a427ce72f0e8f23608b792466296110df68c2bb9
SHA256

4ad8182178499d7937cc0403514e7ce492b59ad5d232ce26dffc163627428eca
SHA512

b64ba2aa9eee81b4a90102224875cf5bd4f506e36ebc586ecdd325378d42c9d225179291299a38c46e69d524ae4c056096e38d61b7846f289a36ccbc9cf2e7d0
SSDEEP

3072:tbCuVVBDsg5FhA41NRT270WAbQcejSKC8QT08l9zi1cg3fk:tbV3BDsehA41Ng701VYC8EfPpg3fk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.69ca079b1d7540e12495b62e143f3070_JC.exe

Files

NEAS.69ca079b1d7540e12495b62e143f3070_JC.exe
.exe windows:4 windows x86

36104fdb02620d4e514cfa85bedb5dac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommBreak
SetProcessInformation
SetFileInformationByHandle
CreateEventExA
QueryActCtxSettingsW
DuplicateEncryptionInfoFileExt
CreateToolhelp32Snapshot
GetVersion
InitOnceInitialize
GetCalendarWeekNumber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE