NEAS[.]ea1b69fec75f299cdf39a5240fa17684_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ea1b69fec75f299cdf39a5240fa17684_JC.exe
Size

416KB
MD5

ea1b69fec75f299cdf39a5240fa17684
SHA1

2fb00f8f191af94db875ec6c42de205e54a62868
SHA256

d28c85806762e506eaec75bcacf494494dab6b2689d733c7d0d0102091ed895e
SHA512

6cd7e23dd87e6927a3ab4d7fdba4f83576eb4e39803b7b20f0f2e19d00edee06c98612b89e1fba4030abead1c53f92cc720df38d3c6960d91210778840bddb7d
SSDEEP

12288:+jv6VGEYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:yyVVYJ07kE0KoFtw2gu9RxrBIUbPLwHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ea1b69fec75f299cdf39a5240fa17684_JC.exe

Files

NEAS.ea1b69fec75f299cdf39a5240fa17684_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ