NEAS[.]261b230b6642fc9af5551a0ba7824230_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.261b230b6642fc9af5551a0ba7824230_JC.exe
Size

119KB
MD5

261b230b6642fc9af5551a0ba7824230
SHA1

c1ec99c9e75d53494658be01a58aa733f8894bc9
SHA256

8d90f57eaedac5ec139dd4efffc5a9a05a1bd679749ed16f226b658a43e1be47
SHA512

c4686514fe34cd8833c3325ba566fea8a49e6ef0627e4b86581b252096c7d1a4cce5a820207c1410abeb64efad7af49e1f39f2c0316c3fd2b87f70a1e45d4481
SSDEEP

3072:VtPBWrRRpVZsSXxoHa15y4wHkmmUeiZCl5yobRA0:XPBqoHaf0rm8SzO0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.261b230b6642fc9af5551a0ba7824230_JC.exe

Files

NEAS.261b230b6642fc9af5551a0ba7824230_JC.exe
.exe windows:4 windows x86

7009b13807e3f4091bc157fdce7cd479

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
BasepPostSuccessAppXExtension
SetThreadDescription
SetThreadpoolTimerEx
ActivateActCtx
AddVectoredContinueHandler
DebugActiveProcess
ContinueDebugEvent
BaseCleanupAppcompatCacheSupportWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE