NEAS[.]51a7b0cecce4b297c9f9cad4ace416f0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.51a7b0cecce4b297c9f9cad4ace416f0_JC.exe
Size

119KB
MD5

51a7b0cecce4b297c9f9cad4ace416f0
SHA1

cf0783518758afd4e480d8e257b9b01eff54ffd3
SHA256

a7becfdaa3f22aff38ca60f8287acf6566149f28b47bfe2df9c191d516f708a9
SHA512

4ee21db2bed3696480dda17d8acba8e910615ee98fb8150d1dec58443f1de240c9a5af1053d62a8ead618f0d0c80afe80a6367006c94c83193b8c4002e134ccb
SSDEEP

3072:kIeh1p3diTO5DvDw6NQwvzJbQyi4QgRcxmo8uRa4JrRoL:7K1PZnNQwvdsl4QgoTAL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.51a7b0cecce4b297c9f9cad4ace416f0_JC.exe

Files

NEAS.51a7b0cecce4b297c9f9cad4ace416f0_JC.exe
.exe windows:4 windows x86

249f67cf9490a6bc175591cda2b34ba2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetGeoInfoEx
WerRegisterMemoryBlockWorker
UTUnRegister
ResolveDelayLoadedAPI
EnumerateLocalComputerNamesW
FindActCtxSectionGuid
CompareFileTime
GetConsoleAliasesW
RegQueryValueExW
GetDiskFreeSpaceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE