NEAS[.]e34676f186e9fa845ac09f5004d59910_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e34676f186e9fa845ac09f5004d59910_JC.exe
Size

119KB
MD5

e34676f186e9fa845ac09f5004d59910
SHA1

97d5d1cef82c9d49e64e0d42c5a7a087e8f35303
SHA256

ab3a4f645f4e842107590c9bd9ba65231b36ccbf4775dc1df1ab1bcf77f1bc2d
SHA512

2e22ab86d7ad9ea104ae944a4a4320af64695cb22b9336f3384b3692b1a01f93d87e825ea264567c12d90cd6907cba08e2693eabbdf151034d65bc3cc9227057
SSDEEP

3072:OYrZByKckDn9Yo7vEYoXlnuP6lL875byDdeDifuNOCHoKC:fBy6Dn9YicY2HZ2uDQ+fuNOSoKC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e34676f186e9fa845ac09f5004d59910_JC.exe

Files

NEAS.e34676f186e9fa845ac09f5004d59910_JC.exe
.exe windows:4 windows x86

8c53cc0e30da5ee864f73cd8209c8379

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NeedCurrentDirectoryForExePathA
BaseFormatTimeOut
OpenWaitableTimerW
BaseUpdateAppcompatCacheWorker
GetCurrentActCtx
GetApplicationUserModelId
QueryMemoryResourceNotification
GetStringTypeExW
Wow64SetThreadContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE