NEAS[.]af47670fe36793e8bb991111581ad170_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.af47670fe36793e8bb991111581ad170_JC.exe
Size

119KB
MD5

af47670fe36793e8bb991111581ad170
SHA1

654aa3536e41f3dc550d2b938d427c8fec25af70
SHA256

6e0a1bc63c15acc689bed5459a131ff4e161ff6085c47ef34a074296fda178c1
SHA512

20874e10f25b12cda5d58329c1968764c7f86668e4a35e28b1ea2cd8ab53037020c633ccea9fde72de5f86b73113738e861652d8cdd56a3464fd9bd124d5c1d4
SSDEEP

1536:Nfi4aW8bGCyxGNcOUWBLef1RFt7ViygjIYC79XOk5Sfme94vQ6/f0ZyWPIsGR6Qh:Nr/kNcOJIRH7ng2OYZlr0AWPItRl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.af47670fe36793e8bb991111581ad170_JC.exe

Files

NEAS.af47670fe36793e8bb991111581ad170_JC.exe
.exe windows:4 windows x86

a29f0fe57fae402cc8c760bd647f0e11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
DisableThreadLibraryCalls
GetFileAttributesExW
GetCalendarDaysInMonth
QueryDosDeviceW
IdnToAscii
EraseTape
BasepCheckWinSaferRestrictions
CloseConsoleHandle
GetHandleContext
GetFullPathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE