NEAS[.]05f5d1bfc66f2c80c5d40ab1371caae0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.05f5d1bfc66f2c80c5d40ab1371caae0_JC.exe
Size

320KB
MD5

05f5d1bfc66f2c80c5d40ab1371caae0
SHA1

929d13bff77d0b4e5618ba6c9c8cad5d5502fd7c
SHA256

302aa998f39ea80fac385df316c7d8114dbeb0c207596b1613f4875e0c50650b
SHA512

b3a0a71a5c101d81556df38b90fbdaa1537caca566bfde46e6f938d982dee3410365a4d201bbf40383873984f957c3cdcc61a0e6253ac530942dc542e68cbc8f
SSDEEP

6144:/a3DvYVQtizH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:C3DvY6tib2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05f5d1bfc66f2c80c5d40ab1371caae0_JC.exe

Files

NEAS.05f5d1bfc66f2c80c5d40ab1371caae0_JC.exe
.exe windows:4 windows x86

7c67769c76033b6d97e683c1bb696d93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TryEnterCriticalSection
GetTempFileNameA
FindActCtxSectionStringA
GetCommMask
GlobalUnWire
GetConsoleKeyboardLayoutNameA
GetNumaProcessorMap
lstrcpynA
GetNamedPipeInfo
ReadConsoleInputW
ActivateActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE