NEAS[.]fa06822399bfcdde6f6374398f4e6ffeexe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fa06822399bfcdde6f6374398f4e6ffeexe_JC.exe
Size

477KB
MD5

fa06822399bfcdde6f6374398f4e6ffe
SHA1

46174ea788cfb036256309194d230612eebcaac5
SHA256

4b39143cbbe98d61ece5a8c1ade62fb07789d10e4c4bbd3754f067da74154430
SHA512

ea4dac4953028a9e5fd1ddb60a382f30e7db7c47418a2c003e1578833f3fd7f2ff2fce3fb0d7904536289e633391d65193560318d0df40849b35ac2c20ce3544
SSDEEP

12288:OjKSZhnVepH18HxMeq5RJ51OGT0T7spksySxDlYJKCHV1fPlizz:OjRhiH18HxMeq5RJ51OGT0T7spksySxt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fa06822399bfcdde6f6374398f4e6ffeexe_JC.exe

Files

NEAS.fa06822399bfcdde6f6374398f4e6ffeexe_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flat
Size: 1024B - Virtual size: 617B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ