NEAS[.]f81d069345222533f2703c74b51ea975_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f81d069345222533f2703c74b51ea975_JC.exe
Size

289KB
MD5

f81d069345222533f2703c74b51ea975
SHA1

f7b433b40ba52758840f0c118e36b82d2e77be63
SHA256

e29a26bebf60a52d6b9e6915864e47419a4f03431d38af07031e778f29b1b380
SHA512

b732fb34bcc75e154a52331945a703814b7b0a9731fa987f9353e73e99e492c31dc887acb4c95f3ad00dc39ab6a0d7aa2caacef6888bc836dd7b9c2548df5fcc
SSDEEP

6144:dVT4dcDg4cW/yNTQNa5ucxGswKkECzJLaQVbU5:bT4dZ45/yN0eAsLklJLJbU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f81d069345222533f2703c74b51ea975_JC.exe

Files

NEAS.f81d069345222533f2703c74b51ea975_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ