NEAS[.]35fb793b1e10a203340fd11dde68b5b3219b08bfa5cbb7f6544684fb917a1c68_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.35fb793b1e10a203340fd11dde68b5b3219b08bfa5cbb7f6544684fb917a1c68_JC.exe
Size

127KB
MD5

ca3445f4039a6792f145dbbf79832f00
SHA1

63655af54e24c7acc13298fa46a83629715cd451
SHA256

35fb793b1e10a203340fd11dde68b5b3219b08bfa5cbb7f6544684fb917a1c68
SHA512

719c99c2bba96c86345678b5a8581115d5d01149325dce128ee0b6fe2965d06166b6053dcaa759074348cb6e11ed5bc75f7cabac7ecbc1f55c569221c32ee2e5
SSDEEP

1536:RpM9fyu3qG/OD4Pa7TZ8uObAg6amXiUG5eXncG8GMbsCDrJ0nfXoaaFywDGTvs3N:6j9mD4Pa78AgZUUeXUbsCDl0nfF8ccN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.35fb793b1e10a203340fd11dde68b5b3219b08bfa5cbb7f6544684fb917a1c68_JC.exe

Files

NEAS.35fb793b1e10a203340fd11dde68b5b3219b08bfa5cbb7f6544684fb917a1c68_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ