NEAS[.]39c8e1a0abe71f2686535a52909033a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.39c8e1a0abe71f2686535a52909033a0_JC.exe
Size

119KB
MD5

39c8e1a0abe71f2686535a52909033a0
SHA1

9a4e458e6461d29a50f41b5122a07e213ad6e69e
SHA256

86f11378a470300cd14ff0df561a15aee07e11b1c0708426957088a61157c8d0
SHA512

cb8a7635a84c5a5745d541e096e7d53c07e9715c950eaffae3d4b195afe2d47ff85b2f10a3736f7ef4fe946640e26cf53eda6c2d81637a5b5eb8186183405bc9
SSDEEP

3072:RO4xItoIyl9h81JzBiWhb/ib1eNRlMrXDfIkjM:RO4Ijkh8diS/iReNRe7DfXjM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.39c8e1a0abe71f2686535a52909033a0_JC.exe

Files

NEAS.39c8e1a0abe71f2686535a52909033a0_JC.exe
.exe windows:4 windows x86

f7e48abcc758eff1149ee7c3186d5c1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryExW
GetProcessDEPPolicy
CreateMutexExA
SetThreadStackGuarantee
VirtualLock
GetCommProperties
DeviceIoControl
CreateMailslotA
SetProcessMitigationPolicy
TlsFree
Wow64Transition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE