NEAS[.]26da01697f851e39f129ac9fcd88ef40_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.26da01697f851e39f129ac9fcd88ef40_JC.exe
Size

119KB
MD5

26da01697f851e39f129ac9fcd88ef40
SHA1

e6ec00ce560481fe7ca83e97877c5c03340515de
SHA256

3456169eeb270b233ce7af311147a9f2ce43a2b29cb673b77717ae92e29828a3
SHA512

97bb7f4ab71ee8a0cd7082234fd49e8de86b3be032da04b6cdbc48839edd09fd415658762a7bc4fb7dcca5d2b02b2e17e670d0166001b7d79e7890366dbba621
SSDEEP

3072:MXpzXlMiMmfPcMeVzCeEts7V2flDFMyRkz:iMic3zCep76PMHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.26da01697f851e39f129ac9fcd88ef40_JC.exe

Files

NEAS.26da01697f851e39f129ac9fcd88ef40_JC.exe
.exe windows:4 windows x86

686b50fec835849413128f6d2839718c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
FindResourceA
ResolveDelayLoadedAPI
RegQueryInfoKeyW
BasepInitAppCompatData
InterlockedDecrement
LZCloseFile
WerUnregisterCustomMetadata
PeekConsoleInputA
CreateTapePartition
GetConsoleCommandHistoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE