NEAS[.]a892b0355e1389eb84e35fab12011380_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a892b0355e1389eb84e35fab12011380_JC.exe
Size

432KB
MD5

a892b0355e1389eb84e35fab12011380
SHA1

21ef1330e35950d497dc6ec09010f5ae013ebbd7
SHA256

40efd94826d77d6519e71009a1b85f415b5f3a6c51b03824c24e28237b91eaee
SHA512

c2dbe087be4e65c082506e7db49b7c6972f794feb5adddcea9d42ac18f91d424baaa832c55575a764e0813886995165b465173c6d3780c331a4809196a696b18
SSDEEP

3072:HPgpzTHRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB3byYFr:viVKgzelZNQSBQGH/CSpWqTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a892b0355e1389eb84e35fab12011380_JC.exe

Files

NEAS.a892b0355e1389eb84e35fab12011380_JC.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 403KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE