NEAS[.]ee83d0fc79d9c1afb5bfdfc86b73adc0_JC[.]exe | Triage

Sharing

General

Target

NEAS.ee83d0fc79d9c1afb5bfdfc86b73adc0_JC.exe
Size

119KB
MD5

ee83d0fc79d9c1afb5bfdfc86b73adc0
SHA1

3c04eca3e0e29c5ff6fe6d476dc4bcdecb9cf6ff
SHA256

841ebd85d4811cde8d04aba493a1a1cb4439c66544f8b8ed76cb680152c08999
SHA512

1f6124632126d5d031a43cb17af6e021a5faee21b4c131768d0304be604c2b25a6095ddf8fff8e871ec970fb02905dd770ffd814c42200e97078f9c1ffec78e7
SSDEEP

3072:C86NqIXFd19R6PGEbPNbbbkUYVuBXDK3iY8loAzT:TUqIXP136PtbcgXDK3BeoAf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ee83d0fc79d9c1afb5bfdfc86b73adc0_JC.exe

Files

NEAS.ee83d0fc79d9c1afb5bfdfc86b73adc0_JC.exe
.exe windows:4 windows x86

faae154d1a84a7b96c885b3469a9705a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFileA
GetCalendarInfoW
VDMConsoleOperation
LZClose
BaseCheckAppcompatCacheExWorker
GetActiveProcessorGroupCount
GetProductInfo
GetTapeParameters
GetDevicePowerState
UnhandledExceptionFilter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE