NEAS[.]00af6f37a8d18f33af9b2f2e36859bd0_JC[.]exe | Triage

Sharing

General

Target

NEAS.00af6f37a8d18f33af9b2f2e36859bd0_JC.exe
Size

115KB
MD5

00af6f37a8d18f33af9b2f2e36859bd0
SHA1

92ba2f2938e831954f335e41a61e9a1a4cdc263a
SHA256

7880946db1d50ead731ccc341ca9e05c6835e487388d8dc93dada9b9c9e0f5ed
SHA512

e15601fbd77156c72bea3d7020a950f5ac796d1a6207423258615b5558d4a242a293299370be7a51672747e585e45bd86499307ab64936da63855d33cb4e489a
SSDEEP

3072:l/nFqzVXKmdQ0zVp5PGR69UnAJHzjBkMqhGKZTbzsRg:HqJamdQ0zVp5eR69FibZL+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00af6f37a8d18f33af9b2f2e36859bd0_JC.exe

Files

NEAS.00af6f37a8d18f33af9b2f2e36859bd0_JC.exe
.exe windows:4 windows x86

159392ee74e64396abf4a21a7981372f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32FirstW
GlobalFix
GetConsoleCommandHistoryLengthW
DebugActiveProcessStop
GetModuleHandleW
UpdateResourceW
GetConsoleCursorMode
DuplicateHandle
ScrollConsoleScreenBufferA
SetConsoleNumberOfCommandsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 59KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE