NEAS[.]c690946fc0e3e4750e840b06b6da7970_JC[.]exe | Triage

Sharing

General

Target

NEAS.c690946fc0e3e4750e840b06b6da7970_JC.exe
Size

119KB
MD5

c690946fc0e3e4750e840b06b6da7970
SHA1

c7c6a42e7a0a01f779900a6c3e6a1a26ee295a36
SHA256

373592642c8d825a22901ad223753a3192c98ab0719a73512742a93e96970c76
SHA512

bcfa6fa550683eda8fe144415ecac477da832f9a51b1418b315cd87f43c1b4c63fe9b23dcaf323dea1ccb243738f7d03f53743575f6e8e60b4da605f636efa6c
SSDEEP

3072:SoWETlsAbq3iIVUdyAlZYg+twVB3ZhsLf:lR+AOjA7ZICVDhsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c690946fc0e3e4750e840b06b6da7970_JC.exe

Files

NEAS.c690946fc0e3e4750e840b06b6da7970_JC.exe
.exe windows:4 windows x86

50a0da0b1a502dab138aad21df33b782

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AppPolicyGetLifecycleManagement
CloseThreadpoolWait
UnmapViewOfFile
GetConsoleCursorInfo
WaitNamedPipeA
GetFullPathNameTransactedA
DuplicateHandle
GetWindowsDirectoryW
GetDiskFreeSpaceA
ResolveLocaleName

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE