NEAS[.]aeceaf9da142096b30410ade62b74ac0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aeceaf9da142096b30410ade62b74ac0_JC.exe
Size

119KB
MD5

aeceaf9da142096b30410ade62b74ac0
SHA1

019414110cb0a0b61adc175e23f7e88bdf93b397
SHA256

d7180ee5d6d4eba5c4e22cfb615b59616ca2ed4f711581e7de4080cab8f1065e
SHA512

a7479a87032812a3ab84f2dd23e1dbc48af0e2621495b1e3d098568264868537d7c5bd67cf6d1dfacc87758da5cfc456a0d73606ac98a51e8a516e3e2c4ce642
SSDEEP

3072:ANTznXz/t7D5+mu2opvA9HjPFgCr1yKR7j:ANTzn7n5oojPFga1yE7j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aeceaf9da142096b30410ade62b74ac0_JC.exe

Files

NEAS.aeceaf9da142096b30410ade62b74ac0_JC.exe
.exe windows:4 windows x86

06861f526073934a59210191084c8bf3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lopen
GetEnabledXStateFeatures
IsNLSDefinedString
BasepAppXExtension
GetWindowsDirectoryW
TermsrvGetWindowsDirectoryA
FreeResource
SetFileAttributesW
HeapLock
IsWow64Process
GetProcAddress

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE