NEAS[.]432f9a0ee86c91a539c290ac647761e0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.432f9a0ee86c91a539c290ac647761e0_JC.exe
Size

119KB
MD5

432f9a0ee86c91a539c290ac647761e0
SHA1

94c9a72eb5072f01383ca6b953fda4d7027bb42b
SHA256

b9918976793b12ebce4cb23bcd39fef7838e766dd44477c5e3abcfa069aa614e
SHA512

756313341660c4c1bcb59b70cf532b273c7dea4384585e0e9bbc4c342c72ac794cfdc01032366807408eaac69d1c234f69efba7724f42048de74698c830f3154
SSDEEP

3072:hqnXk26Sx+rZ1ReSZopvSGEdgKwOj8yTbXaxBgOYPaZwnFex:hsXk26Sx+rteSZocGOgKZoyTbXaxBgPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.432f9a0ee86c91a539c290ac647761e0_JC.exe

Files

NEAS.432f9a0ee86c91a539c290ac647761e0_JC.exe
.exe windows:4 windows x86

904c0f0335193d7718d92259560105cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QuirkGetDataWorker
WerRegisterExcludedMemoryBlock
GlobalMemoryStatus
EnumTimeFormatsA
FlsFree
AcquireSRWLockExclusive
BaseVerifyUnicodeString
SetConsoleDisplayMode
DebugSetProcessKillOnExit
LZCloseFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE