NEAS[.]385fee9488140fcdc6d12f2f7ca37990_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.385fee9488140fcdc6d12f2f7ca37990_JC.exe
Size

119KB
MD5

385fee9488140fcdc6d12f2f7ca37990
SHA1

0577fc7eda0b8ab035e7f55fa289410877a878d2
SHA256

b88afac402ca6b4aed99d608108d14e8bd378108603fb16a2579d296f62b65e2
SHA512

36d8b56c4a6a0430b3ded3bcfe91f6cd8d890ea4e65aa65c75445234e1534f578e6dfe12c2d1b435b232eb323be408fdff3865d83c66e32751e020987b7dc93e
SSDEEP

3072:OPMyBfNUr5jMpImmu8uPyUn+OY6h0EIwNT6o7:EMn5I6uZ6Un3LjIMTb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.385fee9488140fcdc6d12f2f7ca37990_JC.exe

Files

NEAS.385fee9488140fcdc6d12f2f7ca37990_JC.exe
.exe windows:4 windows x86

97782fc4134bfa6d12b39c1fafe884b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSectionWhenCallbackReturns
GetSystemFileCacheSize
OpenJobObjectW
SetFileAttributesTransactedA
BaseDumpAppcompatCacheWorker
SetConsoleDisplayMode
SetConsoleOutputCP
UnhandledExceptionFilter
DeviceIoControl

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE