NEAS[.]a75669216a74357b1d29444e45472d30_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a75669216a74357b1d29444e45472d30_JC.exe
Size

119KB
MD5

a75669216a74357b1d29444e45472d30
SHA1

40c1a7c40a0ae6024b42ed237634ac3ecf487552
SHA256

124d8d23abbe12671106b8de052cebda16f28cd2846770caf82acc487d07a0f2
SHA512

803873923a7c4cc25d65d916fa0e303c7c39e4097d9512eb28ef50b88b253d3775b19f60fbd90d346d16df1fb483e4ca32f3eac260c750b1d53bebb3b0e86218
SSDEEP

1536:Svbz7lRVXBLMInWjHgHBKe9QrI0WSktLGyNL60BEdaDtN9CBQGGwv2wtU3YETN+X:yQAXhpQE0YtLTI0/TIQGnU3TQIV56j0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a75669216a74357b1d29444e45472d30_JC.exe

Files

NEAS.a75669216a74357b1d29444e45472d30_JC.exe
.exe windows:4 windows x86

222be87ebc980731ef53ebdfd66615ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
RegQueryValueExW
SetInformationJobObject
SetProcessInformation
ClosePackageInfo
GetFileAttributesTransactedA
RaiseInvalid16BitExeError
EnumResourceLanguagesExW
EnumUILanguagesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE