NEAS[.]67d99ddb4d5d7590b7abf9d119abc650_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.67d99ddb4d5d7590b7abf9d119abc650_JC.exe
Size

119KB
MD5

67d99ddb4d5d7590b7abf9d119abc650
SHA1

c0e73206bdc0ca101165e681ac3a12dbaf811dc0
SHA256

3e7000e6ac88589160338dfd6a19b7e1100ce6cb05fa27755a7c3f29b6c4ebe8
SHA512

bba4d82235b4c832cf512f22efb72dc8a7bd25a9fec727e6cdb3aa10a1916fe581d3658eb7ed1e6b20b6aaa9516b438c1e8b8aa05fa5493b0b360b6f87aaabbc
SSDEEP

3072:wylthSwKcNoeFpEPL/nnr1IAJFoI5z+7BCmKKI87:X8cOwaL/nh5FoY+FCm97

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.67d99ddb4d5d7590b7abf9d119abc650_JC.exe

Files

NEAS.67d99ddb4d5d7590b7abf9d119abc650_JC.exe
.exe windows:4 windows x86

ff88ecd3602541bcd4d864c8c93b2817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerRegisterFile
BaseElevationPostProcessing
TlsAlloc
RegNotifyChangeKeyValue
timeGetSystemTime
AppPolicyGetShowDeveloperDiagnostic
ConvertCalDateTimeToSystemTime
GetStringTypeExA
GetExitCodeProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE