NEAS[.]cc0d22551c0330fd04de33c2dc82d9d0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cc0d22551c0330fd04de33c2dc82d9d0_JC.exe
Size

119KB
MD5

cc0d22551c0330fd04de33c2dc82d9d0
SHA1

b0a515b374e899347325977a25bb8a94cc3fbe03
SHA256

c704e4c32e870632c8f6bae0b6b1f7e983460db9ae5043d150ef3f8004274294
SHA512

33fedc9b8e3296e4b4920fa2ca2e643245309de371a6ab1602fde5c84716ff9658d4dfebaede6344e7c83a213202aef6befd29da877d3e42cb734ff1248ad6ab
SSDEEP

3072:EoPbuaYMVsO3+mRAA3Xspj3N2KU+tmCVfG:51Yk/3+IAk0bNtU+tPV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cc0d22551c0330fd04de33c2dc82d9d0_JC.exe

Files

NEAS.cc0d22551c0330fd04de33c2dc82d9d0_JC.exe
.exe windows:4 windows x86

e1f3298cedcf37341070394460b99867

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputVDMW
K32GetProcessImageFileNameW
K32GetPerformanceInfo
GetStringTypeExW
SetCachedSigningLevel
SetXStateFeaturesMask
WriteConsoleInputW
RegEnumKeyExW
AddLocalAlternateComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE