NEAS[.]0f1911ed27ea5cda0246d287e6317758_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0f1911ed27ea5cda0246d287e6317758_JC.exe
Size

360KB
MD5

0f1911ed27ea5cda0246d287e6317758
SHA1

c26a559b567c36360f88a30dad16450f8c8706e3
SHA256

e48eeae9f925ae194a35cb70be42d4c2f8e5460daf34d414009823c2331dc5d2
SHA512

df8bfb511e2b7be90f9e2934f11729a172ab2637096e89e3951e3aca8c1238e14c8b68d64702150462c183d1ea6fb0b611502757b918dc80f97df6bfac62b9ff
SSDEEP

6144:5731bdBaBo3uyrcYXeADAYJ/yvozAkeu/NeCxgX9sL10vkPpMeo+CILTO1tFbSzw:51bUyrc6hM2SozLeu/kCy9su8PpMe51K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0f1911ed27ea5cda0246d287e6317758_JC.exe

Files

NEAS.0f1911ed27ea5cda0246d287e6317758_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ