NEAS[.]b0b6edb20b72acd92b63d8fe04d56cab_JC[.]exe | Triage

Sharing

General

Target

NEAS.b0b6edb20b72acd92b63d8fe04d56cab_JC.exe
Size

289KB
MD5

b0b6edb20b72acd92b63d8fe04d56cab
SHA1

af933fcbaa1e7f5a87f122214f3e589bea1907b0
SHA256

475baa415b5eb059891d87c2f807c046dd64190404b624519028aac70763029e
SHA512

20c6f802266808a30e6e6271dc4daf84c0e09705d7d47a840a2f8ffc8314330dbdbb4625b62d0555a44068b0fa5f69b5901bfa3a4396c7cfadc65b9a40d76282
SSDEEP

3072:JihgCYCxVOuzCyk5mvQBohjiBGwOzI96cQkP3K4pLthECQT68VMJLaQljVvzUpz:JzbCxV5tvQ2hjiBGL1kECzJLaQVbU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b0b6edb20b72acd92b63d8fe04d56cab_JC.exe

Files

NEAS.b0b6edb20b72acd92b63d8fe04d56cab_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ