NEAS[.]15bc2ef61f3e7d7c6ac80b599c035780_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.15bc2ef61f3e7d7c6ac80b599c035780_JC.exe
Size

321KB
MD5

15bc2ef61f3e7d7c6ac80b599c035780
SHA1

a0c0d55c44b91bbccabdeec7951de2cf10e0bbe7
SHA256

ffe546836e0d542a6b58c51ec392b95b4503106c343ce886331457519fbc9d31
SHA512

78c03bc2834a3c9d4bd983fa19c89d99115ef4e2249794013d3d1adb77e5d6a7076d15bfc440bac031645f5bde713462d5af4eb8a01fcfeacfeef19b1f2cbb33
SSDEEP

6144:OTj1OTEKnsub1upoH7td/tQqG56Prd3Z5NBA3r14lJDNIl:OFOoKnsub6oHprG5+3a7STY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.15bc2ef61f3e7d7c6ac80b599c035780_JC.exe

Files

NEAS.15bc2ef61f3e7d7c6ac80b599c035780_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ