NEAS[.]1220e026b7c2c057af31e1bea86f6950_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1220e026b7c2c057af31e1bea86f6950_JC.exe
Size

66KB
MD5

1220e026b7c2c057af31e1bea86f6950
SHA1

4db37c222f2fe5b735f8691c375ee6a3902e421e
SHA256

aba0dabfcf89b0be7877799956beb2fa150499f1e3b5ee6a194b1707a6bc67af
SHA512

c9a717f14c8c739eb0ff1bf862981664972ba7f3066b8eb5606aebb3c18eea48232e472f5be785f04339f9321eee5d4b30003db41007406ca64fdc067da55cd1
SSDEEP

1536:h36BRQ2S8W67MZSSi/Q1+VtM9q+LM74Sg+qnjnKen89F9:NmO8b/Q4VGQ+5+qnDBn8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1220e026b7c2c057af31e1bea86f6950_JC.exe

Files

NEAS.1220e026b7c2c057af31e1bea86f6950_JC.exe
.exe windows:4 windows x86

34f349a14e1084563bc81be24c5967b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapQueryInformation
_lclose
CompareStringA
GetSystemWindowsDirectoryA
FindAtomW
WriteConsoleOutputCharacterA
GetProcessShutdownParameters
GetConsoleTitleA
RegisterWaitForSingleObject
FindNextChangeNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE