NEAS[.]bf1ea276a872bb196bde2a5cb6620e40_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bf1ea276a872bb196bde2a5cb6620e40_JC.exe
Size

119KB
MD5

bf1ea276a872bb196bde2a5cb6620e40
SHA1

9a8505ab5cf24467b188ae3a501e896c9ed22e9e
SHA256

26f1e5281b4c79f8ee1454c76508e94304a3b229145b283cb3db2d7ad6c00d5c
SHA512

9b4c995cedce9b035ac6dc1f970dbd9fc239f65b9bb234a14abc4c712ab810948a4582df6332d136469d888f8ea8426a12f406b7f3903d40b8a5feb879a31a59
SSDEEP

1536:k0SNgkYmrKF+NjCKInF4Aw0Kwr7IfnWQqs8Mgyf9+h/ANvKmQlobblvEf3Oif9W3:kXJ11xnwfIP6sjNSmR/lA0eO3vLpf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bf1ea276a872bb196bde2a5cb6620e40_JC.exe

Files

NEAS.bf1ea276a872bb196bde2a5cb6620e40_JC.exe
.exe windows:4 windows x86

141fcce406ece4f42de8b29ffe29eb3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosPathToSessionPathA
OpenMutexA
SetCalendarInfoA
CheckElevationEnabled
GetConsoleTitleA
timeGetTime
SetFileIoOverlappedRange
FindActCtxSectionGuidWorker
CreateHardLinkW
GetCompressedFileSizeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE