NEAS[.]068999f69e1acc7051df5c06dc2fcd80_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.068999f69e1acc7051df5c06dc2fcd80_JC.exe
Size

91KB
MD5

068999f69e1acc7051df5c06dc2fcd80
SHA1

5a9626e3a2eea267d97b8ab7c8fe14ee70752eaf
SHA256

48bbcb1037f975758156680df848239d2ef91d68fea557e2b54354072be5e0cd
SHA512

2ad5aa7aef15cba9d8ed7993eb3f160fe287baff727d6ebda1422fd906991ba4251dce08da8b1af7776f08625669c40cc65dd7c26517ee5bd99d8482d633a72a
SSDEEP

1536:edUVasm9gAHGsOqujkQINbte1EGZpqX5+Ic4FP9MsJLyqTOtEP0Boma1oHXDzt5M:e2gsmbHGhqCkQINRiUsIPZLJh90vbXDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.068999f69e1acc7051df5c06dc2fcd80_JC.exe

Files

NEAS.068999f69e1acc7051df5c06dc2fcd80_JC.exe
.exe windows:4 windows x86

54c1ac780a77d9520296cab57a65c316

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
_adjust_fdiv

Sections

.data
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ