NEAS[.]f3d4792aafc6e1110db40a1cc79d94c0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f3d4792aafc6e1110db40a1cc79d94c0_JC.exe
Size

1.2MB
MD5

f3d4792aafc6e1110db40a1cc79d94c0
SHA1

03874b4ac4a8a7f42c966c38b6b896e4b99b6dd9
SHA256

ccf8ef0006edadb59ca6fd72d60d4bcc07224b2e6e4edda783bc51e97913e740
SHA512

80815d4c39a0f2ae0a80b2e14e74aa7f1970dd6165db55e9ca9243a585b9cd7b212fd218cd0ef007894927efd3f975702a58b2a7fbda465bdbf1dc278cd852d1
SSDEEP

24576:bQprI68Em0BmmvFimm0MTP7hm0BmmvFimm0SGT8P402fo06YE1+91vK3xDWGk4A:bQprz1iLiZGT8P4Zfo06h1+91vOaGBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f3d4792aafc6e1110db40a1cc79d94c0_JC.exe

Files

NEAS.f3d4792aafc6e1110db40a1cc79d94c0_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ