NEAS[.]e452501376140fdd9df287560502a8e0_JC[.]exe | Triage

Sharing

General

Target

NEAS.e452501376140fdd9df287560502a8e0_JC.exe
Size

320KB
MD5

e452501376140fdd9df287560502a8e0
SHA1

fbbe4281e704b0c6507370d262fd7d31a0f89866
SHA256

1cfa8e7f7711dbec8331f85419bead41cf5ab307e6fa973c12692c92f257ced9
SHA512

17b35f3b847e4630d4ca8321537d94f443103fd3851b4e70064f2e1ee3c7897dbd334346ac86c2cc0980a4abb1b95860233915fba7ca2f29b96206151757fe8c
SSDEEP

6144:rtJ75CP9s2H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:rjglz2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e452501376140fdd9df287560502a8e0_JC.exe

Files

NEAS.e452501376140fdd9df287560502a8e0_JC.exe
.exe windows:4 windows x86

0850685bdc03bc4825b9a44fb3bae31a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
BaseQueryModuleData
GetBinaryTypeW
lstrcmpA
MapViewOfFile
FindFirstVolumeMountPointA
SetConsoleCursorMode
CreateDirectoryW
DeleteCriticalSection
SwitchToFiber
IsDBCSLeadByte

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE