NEAS[.]2e39e405a19aa4bfe46b8df094651d50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2e39e405a19aa4bfe46b8df094651d50_JC.exe
Size

320KB
MD5

2e39e405a19aa4bfe46b8df094651d50
SHA1

6926a91dd7c6c27cf5144f1c0b274950a64241af
SHA256

1d0086796f921f311d51df1ba9e8220df03e2bfbc150ce99d846aea62f4e9080
SHA512

ea5ca3cc20291ecb4f3f8ba5dcfd409730b658409d2685455cd0973e9c910f23fd0cb28ee6b42595abd34dd72c39c45cc260dc2f5a5bc77c7b3ec9e2c4ed895a
SSDEEP

6144:1poTpSAYIwEH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:YTIzS2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2e39e405a19aa4bfe46b8df094651d50_JC.exe

Files

NEAS.2e39e405a19aa4bfe46b8df094651d50_JC.exe
.exe windows:4 windows x86

84fba5592b0839966cb1d611eb58e545

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FillConsoleOutputCharacterA
GetUserGeoID
AddConsoleAliasA
VirtualQuery
GetThreadContext
RtlMoveMemory
GetCommandLineW
GetNextVDMCommand
MoveFileA
ScrollConsoleScreenBufferA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE