NEAS[.]7d0e7e1437c7f83252e0ccd75159f960_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7d0e7e1437c7f83252e0ccd75159f960_JC.exe
Size

119KB
MD5

7d0e7e1437c7f83252e0ccd75159f960
SHA1

224003c34d4d03f02b6d071681d6a0683b79ec17
SHA256

fef248d333c717ba2089d29d980d0ef377fdaf22395eb67f7cf1a98de47cb31e
SHA512

7f017517b2f6096fdb99d94f43b19ac3bafe3dea7c186d0872e1b77ea4c13ceb2fb6951e36d8e7ce143a97f00cb156b1afaee8dc1c26a33e94208f61e82c827f
SSDEEP

3072:W6qBH+uuU7e+LsizZQkmTUELfNCZHcaqfWusYrx:nOpuU79LssZrmTlLlCtcaqf/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7d0e7e1437c7f83252e0ccd75159f960_JC.exe

Files

NEAS.7d0e7e1437c7f83252e0ccd75159f960_JC.exe
.exe windows:4 windows x86

750e1124c0e41075327dcc017d61dad4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PssFreeSnapshot
DeactivateActCtx
ReleaseMutex
DeviceIoControl
GetLogicalProcessorInformationEx
UpdateResourceW
SetFileApisToANSI
GetCalendarDateFormatEx
DeactivateActCtxWorker
GetLongPathNameTransactedA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE