NEAS[.]140b9b867290a87d7627b1273b3a5600_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.140b9b867290a87d7627b1273b3a5600_JC.exe
Size

71KB
MD5

140b9b867290a87d7627b1273b3a5600
SHA1

91468b3ef0d4d24c24ca18f23be1e60a58299ffb
SHA256

dedc9f72c4949c70071f1ac23edfe403cfd2b17cfca0f2fb33fdfc5246f46fd0
SHA512

850761d35c0873aa06ac7ee6b9e4769f50787e4c1880440c85613e06021ef434d23c5076311c3851ce5dc78fc4ff554090e0e73ab832b4dfbddcb05223264150
SSDEEP

1536:8dYxGNwvsY9OLAVSB6s9lTx02StWZrUicQP9tO5mKkFbZS:OBN4v9qAKBlTxMWcANKkm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.140b9b867290a87d7627b1273b3a5600_JC.exe

Files

NEAS.140b9b867290a87d7627b1273b3a5600_JC.exe
.exe windows:4 windows x86

b28824e2ef245abdb924574723f9e8a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommConfig
LCMapStringW
SetConsoleNumberOfCommandsA
WriteConsoleW
GetCPInfo
GetNumberOfConsoleMouseButtons
VirtualAlloc
SetProcessPriorityBoost
GetNumaAvailableMemory
FindNextVolumeW
RtlCaptureStackBackTrace

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE