NEAS[.]e94b0ade631cd4457dbed4b8dae56b50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e94b0ade631cd4457dbed4b8dae56b50_JC.exe
Size

119KB
MD5

e94b0ade631cd4457dbed4b8dae56b50
SHA1

17989dda6d7b1c122b0e67d1d185bceb9c38e8a9
SHA256

f133d9d1dd52a538b873663e8c08344a4c79471a2895fdc7f311ea199caf71c9
SHA512

1b1cb61a05bcba32088cb6173f6104331873991c5dae1b1c7bf8ee63ffdb32ecf7711be1ee23263463d91f416e6672d61e4b4a68376db2e4b42bf802955133d7
SSDEEP

3072:96UdTQ1jBEmvsBeGA2jtY3KGIVNF7J39R0CXsuFIaoC:wcTiBwBe92je6/VN9Csp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e94b0ade631cd4457dbed4b8dae56b50_JC.exe

Files

NEAS.e94b0ade631cd4457dbed4b8dae56b50_JC.exe
.exe windows:4 windows x86

2fa2d7a9c5d4602277e69be04f6e4942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
RegSetKeySecurity
SetThreadStackGuarantee
IsNLSDefinedString
QueryIdleProcessorCycleTime
lstrcatA
GetConsoleCharType
WerSetFlagsWorker
GetStartupInfoA
GetPrivateProfileSectionA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE