NEAS[.]003149db35ba562295d1c76b02468360_JC[.]exe | Triage

Sharing

General

Target

NEAS.003149db35ba562295d1c76b02468360_JC.exe
Size

320KB
MD5

003149db35ba562295d1c76b02468360
SHA1

87022189cd2fd915b9c8cb498b6e04374895730b
SHA256

2597d14cefe1019795ec28c4b4a18e5942a1bc91c8dde0c9e5f6212de13c9a72
SHA512

8856e9a24bb8146c1b441fa43a26a418aca2179d26d9ad79c12d0ccca191622ef2f541f0a99a617016afb9b33cfd3352f2dd5460e0c848e7696e39a54d6c1b53
SSDEEP

6144:GO8k11/VmH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:G/k11/C2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.003149db35ba562295d1c76b02468360_JC.exe

Files

NEAS.003149db35ba562295d1c76b02468360_JC.exe
.exe windows:4 windows x86

85b14118bb3c54722afd2de092a53d4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstChangeNotificationA
QueryDosDeviceA
CreateMutexW
GetLastError
IsBadCodePtr
DeleteTimerQueueTimer
FindCloseChangeNotification
GetCommProperties
GetModuleFileNameA
Heap32Next
SetConsoleIcon

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE