NEAS[.]90b97c417011c137a620fcb723d1e5c0_JC[.]exe | Triage

Sharing

General

Target

NEAS.90b97c417011c137a620fcb723d1e5c0_JC.exe
Size

119KB
MD5

90b97c417011c137a620fcb723d1e5c0
SHA1

9dff8c49cce902935105855ddc63a8c2d67a8eb5
SHA256

80fbea3ad33023378a383ae6211fbe4fca6072c0e7958945fe5291d1a8024355
SHA512

9fd42fc3bde95d128ac9aefed01a44cd1f34f2ea004e3839fdc1ac65b787f2171290dcb154d05c282473a3f7902cc51315426b02c4f4a00d36b1bae7d99ef8a4
SSDEEP

3072:YzUs5mwujt7ei5FCS+8hBKI2+B/ItQbo5XsaNbuFO:MUs5mvp7eoFc4UI2wbboBstO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.90b97c417011c137a620fcb723d1e5c0_JC.exe

Files

NEAS.90b97c417011c137a620fcb723d1e5c0_JC.exe
.exe windows:4 windows x86

33e6aeefb40c88b8d91ed158f07f1e81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetMemoryErrorHandlingCapabilities
GetCurrencyFormatEx
BackupWrite
DuplicateEncryptionInfoFileExt
WerGetFlags
GetModuleHandleA
CloseThreadpoolWork
GetVolumeInformationA
GetEncryptedFileVersionExt

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE