NEAS[.]ReceiptPDFexe_JC[.]exe | Triage

Sharing

General

Target

NEAS.ReceiptPDFexe_JC.exe
Size

719KB
MD5

3c18dea21d4f2cb074c6e6b81b270bb8
SHA1

2af59c618a9662e342c9201b3ff2670a0ba83b81
SHA256

64fdde31e18afd348c0727affafb347f0cd0203ec20268fbea9dcb4cc6d1caa9
SHA512

c4c504483cc4caddae8c35c5f2b5ef29c7c23ed9b18fe78af966993fcc29742f1e632b72459ff9fd6daa34aa41d2474f73fa350e871153b20c0973add810f728
SSDEEP

12288:xS7s9ewL8bqNN7Pg82gqHKG5FkDiDpftvQhhVNK45RxseNlgjuh:xS7s9evqN5xKHKGHpfFyNKEfDUah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ReceiptPDFexe_JC.exe

Files

NEAS.ReceiptPDFexe_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 626KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ