NEAS[.]02076b7273ad564419d770b6d6248f10_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.02076b7273ad564419d770b6d6248f10_JC.exe
Size

320KB
MD5

02076b7273ad564419d770b6d6248f10
SHA1

8a38326bb428c9d3bee7362ceb44939821ba7ca6
SHA256

814497945afb8f56970b225e8822a35423097fdcea7e8c9810b278cacd544e8a
SHA512

5871e079b5b86636541c77c6360f1b13009087900ecccb6089b922a3ea80747ca64966e4d8e314e3be0ba39ba6e3752714e61737f60ed396dc35123fe84b3a7f
SSDEEP

6144:6ks6lzE5H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:6aEx2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.02076b7273ad564419d770b6d6248f10_JC.exe

Files

NEAS.02076b7273ad564419d770b6d6248f10_JC.exe
.exe windows:4 windows x86

4eb582e448f67ec912c69a137c7fc2cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalWSecure
SetConsoleMode
CreateTimerQueue
CheckNameLegalDOS8Dot3A
SetFileShortNameA
SetProcessAffinityMask
IsBadWritePtr
SearchPathW
SignalObjectAndWait
SetMessageWaitingIndicator

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE