NEAS[.]00da65db9254a1737454c54570e032f0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00da65db9254a1737454c54570e032f0_JC.exe
Size

439KB
MD5

00da65db9254a1737454c54570e032f0
SHA1

8d4dbf7904ad3973e8480a45ab675ac686ab6eb5
SHA256

0452144ac7915654bcb27fb37fab787c81c5fb5b9eeb32ad5eaae164c9abc038
SHA512

793996c6151e20c0fff6648f65e4800a13b43fb648dcfb6986f22d75d82ba1b1a064f877ed8f16bc0bc6a8f145a9391eae49777e7d9335d08c9bca4a6f7490c3
SSDEEP

6144:80QwHzhi3Cr0sKAQYm83AbicJbJWxmoztSBQZanglMeQP6qhGTKN:80/TYLsTDpLcJ9WxxiQZangieJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00da65db9254a1737454c54570e032f0_JC.exe

Files

NEAS.00da65db9254a1737454c54570e032f0_JC.exe
.exe windows:4 windows x86

721dab316e3fb31d73afe9a2ab8abce0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlQueryDepthSList
RtlSubAuthoritySid
RtlCreateBootStatusDataFile
NtCreateMailslotFile

user32

GetDoubleClickTime
GetInputState
GetClipboardOwner

Sections

.text
Size: 432KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE