NEAS[.]8387203c49b7c759b803458a53746940_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8387203c49b7c759b803458a53746940_JC.exe
Size

119KB
MD5

8387203c49b7c759b803458a53746940
SHA1

11d32f0b67c3a9d9f7cb3056fb660f20f2212531
SHA256

089d0032bbda63fed2a221a2cbf2891aa16427aa182124ce0e8fd781e56cbfc4
SHA512

86b260412df26bb6113bd203562e72aae3f73be65aad879a180e14ca12ea8be13cdd71a37a6ea9fbaf7b5885b09547a7002d8e8bf602db490aef4ffd633c31d8
SSDEEP

3072:OMMP72wLbLNDz66lozDjz1QRChICgpKtOGkELTB+fcB:OzPKcNJlozf+o2KtOGDv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8387203c49b7c759b803458a53746940_JC.exe

Files

NEAS.8387203c49b7c759b803458a53746940_JC.exe
.exe windows:4 windows x86

ebd57b1ae4ec10afc03b9087b7c6f37c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHandleCount
GetAppContainerAce
DnsHostnameToComputerNameExW
LZStart
SetLocalPrimaryComputerNameW
CreateFileMappingNumaA
SetConsoleCtrlHandler
TzSpecificLocalTimeToSystemTime
CompareCalendarDates

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE