NEAS[.]0ed6ab020786fa9bc488bbcad3aa8d90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0ed6ab020786fa9bc488bbcad3aa8d90_JC.exe
Size

9.9MB
MD5

0ed6ab020786fa9bc488bbcad3aa8d90
SHA1

1ed359195d1150e3f247e604598395005261c828
SHA256

53404d062f5d95d45a4e8ee01af07a7d9385cec10ff930a2bb8169905c0085db
SHA512

254c1f6c35a4b6eafbf194a3102994c943f5c8ce8024ab4ceade29b2e6d055d23fdabbedfa25001f5c4a150ab5ebfc5e2e04961d849abd5cfb48b42eca76301f
SSDEEP

196608:4CalVYvf5zKg05xXZl2QD7nkUiri7EYdpBZu9tw+kF:wl4Kg05xXZD7nk1ri7ew+kF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0ed6ab020786fa9bc488bbcad3aa8d90_JC.exe

Files

NEAS.0ed6ab020786fa9bc488bbcad3aa8d90_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 255B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ