NEAS[.]8d8e036e6abe9b672d6f3f6e1ccda1bd_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8d8e036e6abe9b672d6f3f6e1ccda1bd_JC.exe
Size

232KB
MD5

8d8e036e6abe9b672d6f3f6e1ccda1bd
SHA1

539dfe43b5d4fdd5478b9ab68a10a2163f95c867
SHA256

9f33c7a7ad54b25f6b12306add7cb83bbdf34af4a9065f1153db78ccb727a32f
SHA512

c8de026bd604d668b0dbda12f5f4da6ce5a114962fb94620de19014e477fb125ac8a6fdefd1ba8514c827569b58ed879e2662f848e1ab742cc6ef2e9fcffc433
SSDEEP

6144:dafcEHI/prnm4y3NjTjuC8xOcxph8mQvmQu:AHIhnmn9jT8xQOQu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8d8e036e6abe9b672d6f3f6e1ccda1bd_JC.exe

Files

NEAS.8d8e036e6abe9b672d6f3f6e1ccda1bd_JC.exe
.exe windows:4 windows x86

3e3d633779e35448851e7a9ca7e72522

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoInitialize

Sections

.MPRESS1
Size: 163KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ