NEAS[.]122260c43a80e815b1f9a65e0c8a1280_JC[.]exe | Triage

Sharing

General

Target

NEAS.122260c43a80e815b1f9a65e0c8a1280_JC.exe
Size

56KB
MD5

122260c43a80e815b1f9a65e0c8a1280
SHA1

9371cbfe982e4104aeb5414286849232a3e17a45
SHA256

f16929f4c24e6ca43a0dde6a799328b465c383d2d3c5b66e6e85df391e42469c
SHA512

29b2f24b9999d964cfa3db5018f5da7b097a30d28b766c26321fd9de43fe2c4152778416749f128c8da50fb5a4ddb4e25582a5dfdc3e47ef72e3123f1f70d45a
SSDEEP

1536:wJRqOtooF1x5lNNgKdUpW7vVwQ+oeArOtyUvj3:ihOc1bNhdU4NWozrO7r3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.122260c43a80e815b1f9a65e0c8a1280_JC.exe

Files

NEAS.122260c43a80e815b1f9a65e0c8a1280_JC.exe
.exe windows:4 windows x86

8f1e3f085b07b07b327e58543177264c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesA
GetCurrentConsoleFont
GetUserDefaultUILanguage
GetConsoleAliasesA
GetNumaProcessorNode
ValidateLCType
CreateMailslotW
BuildCommDCBAndTimeoutsW
BuildCommDCBAndTimeoutsA
GlobalCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE