NEAS[.]4e7f2fc84f2758780a5145cdfd266670_JC[.]exe | Triage

Sharing

General

Target

NEAS.4e7f2fc84f2758780a5145cdfd266670_JC.exe
Size

119KB
MD5

4e7f2fc84f2758780a5145cdfd266670
SHA1

6e4d8538e3ee430f36222ae7a7d813949d33aec2
SHA256

9fa6a2036099c66a1b04bb7361a9c7ea53b0bd60214d217f6668c7757c7fca53
SHA512

ae1b6f65cd2a4821fb1a3e2848092e69d172eb6c9e644427980188f15a8c44c32e6b2c0ff12361a6bfdd18f048b7b008eeec9bce51cef223288bed990b1dcf41
SSDEEP

3072:c9qcG73h0gthkVcsOSMTGOCD0HCK54sV6A8zd:c076g2csf9OC0HCTsAjzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4e7f2fc84f2758780a5145cdfd266670_JC.exe

Files

NEAS.4e7f2fc84f2758780a5145cdfd266670_JC.exe
.exe windows:4 windows x86

2b2414d2531b6ed58e749b60b8a6d1b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
WaitForThreadpoolWaitCallbacks
LZStart
GlobalAddAtomExA
GetVersionExA
GetStringScripts
CreateNamedPipeW
IsDBCSLeadByteEx
GetSystemWindowsDirectoryW
BaseReadAppCompatDataForProcessWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE