NEAS[.]063d31f8cf5c61d51f6f3d01c3c37be0_JC[.]exe | Triage

Sharing

General

Target

NEAS.063d31f8cf5c61d51f6f3d01c3c37be0_JC.exe
Size

776KB
MD5

063d31f8cf5c61d51f6f3d01c3c37be0
SHA1

531fa91c7e68242d6cde5998deb1c5d8b9a768a8
SHA256

d8f5ff0a5aae28cdf286977499fc8aa6517b74acc2f18e4faaf8d606b8a0e890
SHA512

f5d3b6938b67355a78ccce7d63af8c9bd1cfa46df7566ce1f988144afc7ccf35ff901b78b68456b2918b3e8a1d3bbeaa6b03c050a3ef0272f1b98cf8570929f4
SSDEEP

24576:0XWfdwxNPYOL0JmBn14gpy13bffKE6Bpx0rHL:GWfdwbYmCmB14gpofC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.063d31f8cf5c61d51f6f3d01c3c37be0_JC.exe

Files

NEAS.063d31f8cf5c61d51f6f3d01c3c37be0_JC.exe
.exe windows:4 windows x86

5cf67f4102afa5f4597651f77c704171

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateEventW
SetStdHandle
OpenSemaphoreW
GetFullPathNameW
WaitForMultipleObjects
MoveFileExW
SearchPathA
LoadLibraryA
SetLocaleInfoW
HeapCreate
GetProcessVersion
FreeEnvironmentStringsA
OpenMutexW
GetDiskFreeSpaceA
GetEnvironmentStringsA
SetCurrentDirectoryA
GetBinaryTypeA

msctf

TF_CreateCategoryMgr
TF_RunInputCPL
TF_CreateLangBarMgr
TF_CreateThreadMgr

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ADATA
Size: 756KB - Virtual size: 763KB

IMAGE_SCN_MEM_READ