NEAS[.]2211a370844148eeb489ad79ca40636abin_JC[.]zip | Triage

Sharing

General

Target

NEAS.2211a370844148eeb489ad79ca40636abin_JC.zip
Size

309KB
MD5

29ad19a5364b7a091181bb7f7089b024
SHA1

3bf136d021afdbfecfc2df37c4114198ba0eb8c9
SHA256

200f2a3dd32cc7f7c39bac79d6cab48bf040fb4900254db5dcb65e8796b09246
SHA512

4b1ed0375dcdb3594c840b4a3b53b7c1a7ff23d78c7d81050548ff84ca29026ca8e8a7bdf0f165e345c732b8e6a542f455deab298cbec805dd347d375e9fa2ce
SSDEEP

6144:eAkUyuj+Zux3pk+sgkN7/+Vam3JKvugtou06lpxhvLOooDUd:CUBj+uCJp7QFgtou9lBL7oY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ba9dcc325c94223a3a6b86a32e1b45a23cf61af6b360a678008c2f0e2a69a5c1.exe

Files

NEAS.2211a370844148eeb489ad79ca40636abin_JC.zip
.zip .ps1

Password: infected
ba9dcc325c94223a3a6b86a32e1b45a23cf61af6b360a678008c2f0e2a69a5c1.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ