NEAS[.]03db39d6a018d44d21f3844880941c30_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.03db39d6a018d44d21f3844880941c30_JC.exe
Size

52KB
MD5

03db39d6a018d44d21f3844880941c30
SHA1

c8df19e2a4f62714a2bd50e8ab1f3308077732ca
SHA256

f860ff37a9cd6ffe4229dd77d81bebec814571f99f4ddf7ab5efad4453abd48b
SHA512

85800e9992d7f36228f88fc0b8356b494198758ddb17595c73b60236708f918f65799d77f23ce5554503096a77228255b81a887657e559cae11df43acea51e06
SSDEEP

768:jGjfdTt9LrXDeXw23d6yPdunL2tt494Gr7efq/iB9HrPlbo9x0t:jwL0Oy294cJSz9og

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.03db39d6a018d44d21f3844880941c30_JC.exe

Files

NEAS.03db39d6a018d44d21f3844880941c30_JC.exe
.exe windows:4 windows x86

fbf5cf372dec7b1e496b7da5224b02dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ReadFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE