NEAS[.]7d09f948f3ae2434813c555799697ff0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7d09f948f3ae2434813c555799697ff0_JC.exe
Size

119KB
MD5

7d09f948f3ae2434813c555799697ff0
SHA1

120b144ac9ddd70a0d96a6d145870ec45f3cdd43
SHA256

71dbd7d5526206e38f121aab5580711b273630ed63a26ff91fd55b31798dc937
SHA512

b7db9d7d9c97617fd99e92919e75158478b3309719408ced18411538e2e368c99f44547c20cac821ca3ef5bf20a44f0021c2e1851a8dab12996473173d61040e
SSDEEP

3072:geTj6jqdKUnvZpL4jnBzjbiYjMDQ8TPKanF3GrW:go2acrBjbiTDQ82Lq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7d09f948f3ae2434813c555799697ff0_JC.exe

Files

NEAS.7d09f948f3ae2434813c555799697ff0_JC.exe
.exe windows:4 windows x86

f0b19758e20bfd3e74d2ac37e64f5a2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformationForYear
TlsFree
_llseek
RegisterApplicationRecoveryCallback
RegisterWowBaseHandlers
FindNextFileNameW
RegDisablePredefinedCacheEx
SetFirmwareEnvironmentVariableA
GetLogicalDriveStringsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE