NEAS[.]93170306c3515cf0a6fcf06df7e1b430_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.93170306c3515cf0a6fcf06df7e1b430_JC.exe
Size

180KB
MD5

93170306c3515cf0a6fcf06df7e1b430
SHA1

41ee000c82a80566cc4014647911dbdfd7c4338b
SHA256

35260c5d597fbc8c2c9aed24088c8305dee0e6153f10fa749d85e5915dcaee54
SHA512

3a81653baa6d528c640a2ae8948bfda79e5a8dbb757e90e405f2144e44fba51978a86018a491fd45015aa82ae89c197419a8fc9382dd5071534b91297177e686
SSDEEP

3072:7MIBmDcX6XZZoxwgE9xA8OJ8+KfAXSJMT+dsyZQUeiXUyWmrjeCLrnqkqNq:gy88xCLr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.93170306c3515cf0a6fcf06df7e1b430_JC.exe

Files

NEAS.93170306c3515cf0a6fcf06df7e1b430_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ