NEAS[.]0548fa477faebd396e08cb355049ac70_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0548fa477faebd396e08cb355049ac70_JC.exe
Size

96KB
MD5

0548fa477faebd396e08cb355049ac70
SHA1

846f9fd0205b32cf62d87013ac57f7707e71d3a4
SHA256

282e789c87a2079fb0f42a9d9e169e0fea676d5cbcffb28261e9cb6b8e331304
SHA512

6f0241bd542e530a668eb4866ba6fb51097655d2bef05b5782948183694b3f12b41993cc00fcd193d4d8dfd690952188b30f1b31f9c2c284b86577de0bf37b71
SSDEEP

1536:aiBIdkwPKXDLPytisviK0gvvYhr7DCMe7mpeMlfWqRJKS/UzyMeBI:LGd5SXfGimiKNvYlfCMfpdWmKVzzN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0548fa477faebd396e08cb355049ac70_JC.exe

Files

NEAS.0548fa477faebd396e08cb355049ac70_JC.exe
.dll windows:4 windows x86

47b95eaa8a92898962a601a6fb44ee48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
free
malloc
_initterm

kernel32

DisableThreadLibraryCalls

Exports

Exports

JGS7DecodeBlock
JGS7DecodeBlockQuery
JGS7DecodeCreate
JGS7DecodeDestroy

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE