NEAS[.]12c9cf18f5dfd01b84ecfb937d16ab70_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.12c9cf18f5dfd01b84ecfb937d16ab70_JC.exe
Size

63KB
MD5

12c9cf18f5dfd01b84ecfb937d16ab70
SHA1

ced9559d8d08319757f020dd121534f133a6d670
SHA256

55ee53a83dc4e7e34ead5dafdbd7ef1a04f748d4bca6c6608b37742bf85b4225
SHA512

dd1dcc767e7ee01aab34fbfb71b3814f5b21ec1392944564084976eb7f60ff2cab61785017832d191ed49a8dd42feafdff19b4b2999e4b25b0dd2d486a54725a
SSDEEP

1536:3L225sx3meR0brgqEEGMyQawUTOkwiX2JIDuyKM174/:3r3eg7EfMyZ5TOwGqDBV4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.12c9cf18f5dfd01b84ecfb937d16ab70_JC.exe

Files

NEAS.12c9cf18f5dfd01b84ecfb937d16ab70_JC.exe
.exe windows:4 windows x86

9621e5d05293d3405f3a8641b46fab7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
GetSystemTimeAsFileTime
lstrcpyA
GetTapeStatus
LockResource
VerSetConditionMask
EnumCalendarInfoW
GetFileSizeEx
OpenEventA
SetConsoleMenuClose
SetLocaleInfoA
WriteFileGather

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE