NEAS[.]14dbd917a7e5a79dd1d95b8afe747790_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.14dbd917a7e5a79dd1d95b8afe747790_JC.exe
Size

119KB
MD5

14dbd917a7e5a79dd1d95b8afe747790
SHA1

cbd3cb6486ab115d7c0f9cb9043056c50a1ee954
SHA256

68fe87046a2e50c97e10921fae445eb3c8fc736ed666e2e889a84baafbb3b921
SHA512

59a764a8c70219a318798f88ca74def3b29b747f421bfa2cd130264d7811594804c585864e7d4ac1681c28692ed3dcaaef12009f9689a01bb02d58a8cffde9a1
SSDEEP

3072:cOJX/yvoQ6oR59O2Rgz+a1izuoKhp0fqXCPGRKXiury:c3tR5ToXiSoKHsRIUiury

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.14dbd917a7e5a79dd1d95b8afe747790_JC.exe

Files

NEAS.14dbd917a7e5a79dd1d95b8afe747790_JC.exe
.exe windows:4 windows x86

0731b4bd622a6543d422876a535e2b16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
FindNextVolumeW
SetEndOfFile
Thread32Next
CreateFileMappingFromApp
EnumDateFormatsExEx
GetSystemFirmwareTable
CompareStringW
LeaveCriticalSection
PssCaptureSnapshot
GetDurationFormatEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE