NEAS[.]ffc88be0dd2db171a838ed8744df1620_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ffc88be0dd2db171a838ed8744df1620_JC.exe
Size

119KB
MD5

ffc88be0dd2db171a838ed8744df1620
SHA1

f10b1419fbe7e9cc0f3da9ecdaaa7f7fc37e855e
SHA256

4295ea3bfff6b1eb20db761696833cf4ffd3f5172fa1f383f56ee0c3c27b231e
SHA512

164c4515977a479fec683691af8565a3238106530c6e76db2cf7752304ddebaa70c793d14ed2cc7f103beeb88895e8e62187dc05ac2b59eb487b29869dfb2980
SSDEEP

3072:tr72wAputDuv4koI4IrIvHqYq5h11OV0YrG7WJufrt8:Z2wKuJuv4k7TIvqD5wdGJfrK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ffc88be0dd2db171a838ed8744df1620_JC.exe

Files

NEAS.ffc88be0dd2db171a838ed8744df1620_JC.exe
.exe windows:4 windows x86

0f80d60b53c634334567608edb3f9991

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileScatter
WriteConsoleA
PurgeComm
SetComputerNameEx2W
GetSystemDefaultUILanguage
IsNativeVhdBoot
Wow64GetThreadContext
WriteConsoleInputA
GetFirmwareEnvironmentVariableA
CreateSemaphoreA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE