NEAS[.]e3df5baf7a1d5a9a39208da701277370_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e3df5baf7a1d5a9a39208da701277370_JC.exe
Size

119KB
MD5

e3df5baf7a1d5a9a39208da701277370
SHA1

3cc62281f82774716a7ec870f37fe3d40f6394c8
SHA256

55fb7320d355a2e9c407f6322271a3ab1488abe3daed828a5790490f0bb48fc6
SHA512

ee79590863b64bf4f7625bd4072f36cebabd222d9f379cc11415e4bda888881d5118193a9e4ad681245fadf42840f45639f421f4d9a4715e16d0864942145729
SSDEEP

1536:HPjLvBfq49b8B1lPGkiIY9UDilUcGAJrpCIPfPYSVhXQjGSficRuHyh9gN3bCWPm:vXuPLiIY9UD0EAhpCAIq+icwHyTahRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e3df5baf7a1d5a9a39208da701277370_JC.exe

Files

NEAS.e3df5baf7a1d5a9a39208da701277370_JC.exe
.exe windows:4 windows x86

4f02882560917b81a7106e5bbf553148

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerExA
GetStartupInfoW
GetVDMCurrentDirectories
QueryProcessCycleTime
LoadAppInitDlls
GetProcAddress
GetProcessIdOfThread
GetProcessPriorityBoost
SetFirmwareEnvironmentVariableExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE