NEAS[.]126031559fb5d3f94de8d9e7039ad070_JC[.]exe | Triage

Sharing

General

Target

NEAS.126031559fb5d3f94de8d9e7039ad070_JC.exe
Size

56KB
MD5

126031559fb5d3f94de8d9e7039ad070
SHA1

1e89e092d1bda016b1bb0445ba9133d26e4f2096
SHA256

b86c9000a72def1144387c0581011111a5f05889e34eafc9b88c3e6e3d626aab
SHA512

3eeaeb4a346bef4a428936609a0a0fccd0f5bdeb637df89a1d8d70e6ac6811a62e67576b4885509c9e70012f1250f746ac3e52ae9458b5811c09d01e6220efe1
SSDEEP

1536:i3MehJYvGW7tlXDI+XOd6iGwyIVckTNtXLL:i33EZ7PXDlXG6i+IV5tbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.126031559fb5d3f94de8d9e7039ad070_JC.exe

Files

NEAS.126031559fb5d3f94de8d9e7039ad070_JC.exe
.exe windows:4 windows x86

39efc9b673fa8cb61f9ee4d385e47aef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
GetEnvironmentStringsA
SetPriorityClass
VerSetConditionMask
SetFilePointerEx
FindFirstFileW
BackupRead
GetConsoleTitleW
MoveFileA
HeapUnlock
CreateDirectoryW
ResumeThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE